Corporate Finance Advisers
- Roger Pay
- 5 hours ago
- 23 min read
Corporate Finance Advisers
Corporate finance advisers assist companies with high-stakes, transformative transactions and capital decisions. Unlike day-to-day accounting or management consulting, corporate finance advisory focuses specifically on capital allocation, deals, and capital market events.
Core Advisory Services
Mergers & Acquisitions (M&A):
Sell-side: Preparing a business for sale, building financial models, identifying strategic or private equity buyers, and managing negotiations through to close.
Buy-side: Identifying acquisition targets, conducting commercial valuation, structuring bids, and integration planning.
Capital Raising & Debt Advisory:
Securing growth capital, debt restructuring, or refinancing from banks, private equity, or institutional investors.
Structuring equity rounds, private placements, or venture debt.
Valuation & Financial Modeling:
Conducting formal business valuations, fairness opinions (e.g., for interested person transactions or board review), and scenario analysis.
Equity Capital Markets (ECM) / IPO Advisory:
Acting as issue manager, sponsor, or lead adviser for public listings (IPOs) or reverse takeovers (RTOs).
Standard Fee Structures
Most corporate finance engagements use a hybrid fee structure:
Retainer: A fixed recurring fee (often monthly) covering pitch deck preparation, financial modeling, and initial buyer/investor outreach.
Success Fee: A contingent fee paid upon successfully closing the deal, typically structured as a percentage of total transaction value (often ranging from 1% to 6%, depending on deal size and market segment).
Reimbursed Out-of-Pocket Expenses: Travel, legal/tax due diligence, and virtual data room costs.
Regulatory Context
In regulated capital markets like Singapore, advising on corporate finance (such as advising on public takeover offers, capital raises, or issuing securities) typically requires licensing—such as a Capital Markets Services (CMS) Licence regulated by the Monetary Authority of Singapore (MAS) under the Securities and Futures Act, unless specific licensing exemptions apply.
How would you like to proceed?
Explore M&A sell-side process & documents
Compare boutique vs. Big 4 CF advisory
When is licensing required?
Licensing requirements for corporate finance advisory depend on the specific services provided, the target audience (public, institutional, or private buyers/sellers), and whether the transaction touches regulated capital markets.
1. When Licensing IS Required
In major financial centers (such as under Singapore's Securities and Futures Act (SFA) regulated by MAS), a Capital Markets Services (CMS) Licence for "Advising on Corporate Finance" is generally required when engaging in:
Public Capital Raising & IPOs: Acting as issue manager, sponsor, or lead adviser for initial public offerings (IPOs), secondary share listings, or reverse takeovers (RTOs).
Public Takeovers & Tender Offers: Advising a target or acquirer on a public company takeover governed by the Take-over Code.
Securities Structuring & Issuance: Advising corporations on issuing debt securities (bonds), convertible bonds, or equity to external or retail investors.
Fairness Opinions for Public Companies: Issuing valuation reports or fairness opinions to independent directors or public shareholders regarding interested person transactions or major acquisitions.
2. Common Exemptions & Unlicensed Scope
Licensing is typically not required (or falls under specific statutory exemptions) in the following scenarios:
Pure Private M&A Advisory (Asset / Share Deals): Brokering or advising on private M&A transactions where negotiations occur strictly between private businesses or accredited/institutional buyers, provided no public offering or security distribution is involved.
Incidental Advice by Professional Service Providers: Legal firms, accounting firms, or licensed trust companies providing advice on legal, tax, or accounting structuring for corporate transactions.
General Business Consulting: Strategic advice on operational restructuring, internal valuations, financial modeling, or general growth planning that does not involve issuing or dealing in securities.
Exempt Entities: Banks, merchant banks, or existing CMS licensees in other categories (e.g., broker-dealers) that are already authorized under broader institutional frameworks.
3. Key Regulatory Criteria for a CMS Licence
When an entity applies for a CMS Licence in Corporate Finance Advisory, regulators evaluate:
Regulatory Aspect | Key Requirement (e.g., MAS Framework) |
|---|---|
Capital Requirement | Base capital (typically S$250,000 minimum for corporate finance advisory). |
Key Personnel | At least 2 directors (with at least 1 resident locally) and an experienced CEO. |
Appointed Representatives | Advisers must be listed on the public register and meet CMFAS exam/competency requirements. |
Compliance & AML | Robust policies for Anti-Money Laundering (AML), Counter-Financing of Terrorism (CFT), and independent compliance oversight. |
Where would you like to take this next?
Differentiate M&A business brokerage vs. licensed CF advisory
Details on how to apply for a corporate licence and appoint a representative can be found on the Capital Markets Services (CMS) Licence page and Appointing a Representative for CMS Licensees or Exempt Financial Institutions page respectively.
Step-by-Step process and Timeline to Apply for a MAS CMS Licence in corporate finance
Applying for a Capital Markets Services (CMS) Licence in Advising on Corporate Finance from the Monetary Authority of Singapore (MAS) involves a structured multi-month process.
To obtain approval, the entity must meet specific admission criteria regarding track record, key personnel, base capital, and compliance frameworks.
Minimum Regulatory Criteria
Requirement | Prescribed Threshold |
Entity Structure | Singapore-incorporated company with a permanent physical office. |
Base Capital | Minimum S$250,000 maintained at all times. |
Chief Executive Officer (CEO) | Resident in Singapore with at least 10 years of relevant corporate finance experience. |
Board Directors | Minimum of 2 directors, with at least 1 resident in Singapore. |
Appointed Representatives | Minimum of 2 full-time, Singapore-based representatives (can include the CEO/Executive Director) meeting CMFAS/competency standards. |
Step-by-Step Licensing Application Process
1 Phase 1: Structuring & Corporate Setup
Weeks 1–3
Incorporate Entity: Establish the Singapore Private Limited company via ACRA.
Finalize Governance: Identify qualified individuals for CEO, Board Director, and Appointed Representative roles who meet MAS's Fit and Proper Criteria.
Premises: Secure a physical office footprint in Singapore suitable for client confidentiality and operational risk management.
2 Phase 2: Operational & Compliance Build-Out
Weeks 4–8
Draft Business Plan: Define target client profiles (e.g., accredited/institutional vs. public companies), transaction types (private M&A, IPO advisory, debt capital markets), 3-year financial projections, and revenue models.
Establish Compliance Framework: Prepare tailored compliance manuals, internal risk management systems, and Anti-Money Laundering / Countering the Financing of Terrorism (AML/CFT) policies aligned with MAS Notices.
Compliance Resourcing: Set up an internal compliance function or engage an outsourced compliance service provider.
3 Phase 3: Formal MAS Form 1 Submission
Week 8
Online Application: Submit Form 1 electronically via the MAS online portal (MAS-Tx).
Supporting Documentation: Upload business plans, organization charts, audited statements/bank proofs, curricula vitae (CVs) of key personnel, and compliance manuals.
Application Fee: Pay the non-refundable S$1,000 MAS submission fee.
4 Phase 4: MAS Review & Query Round(s)
Months 3–6
Assessment: MAS evaluates the applicant's fitness and propriety, track record, conflict of interest management, and financial viability.
Clarification Requests: MAS typically issues 1 to 2 rounds of written queries probing the deal-sourcing model, background of key representatives, and tailored AML protocols.
5 Phase 5: In-Principle Approval (IPA) & Commencement
Months 6–8
Receive IPA: MAS issues an In-Principle Approval letter outlining conditions precedent.
Fulfill Conditions (within 6 months): Capitalize the entity with the required S$250,000 base capital, finalize Professional Indemnity Insurance (if applicable), and submit representative appointments via Form 3A.
Licence Issuance: Upon verification, MAS issues the CMS Licence and lists the firm and its representatives on the public Financial Institutions Directory.
Indicative Timeline Breakdown
[Weeks 1-8] [Months 3-6] [Months 6-8]
Preparation & MAS Assessment & IPA Fulfilment &
Document Drafting -> Clarification Queries -------> Final Licence Grant
Total Time to Launch: Typically, 5 to 8 months from project kickoff to operating approval.
Primary Cause of Delays: Incomplete submissions, generic AML manuals that lack customization to the specific client base, or appointing key officers who cannot clearly evidence 10+ years of relevant transaction track record.
Would you like to explore any of these related topics?
Review ongoing post-licensing MAS reporting requirements
Practical Differences and cost tradeoffs between hiring an in-house Compliance officer versus Outsourcing to a boutique Compliance firm for a CMS licensee in Singapore
For a Capital Markets Services (CMS) licensee in corporate finance advisory, determining whether to hire a dedicated in-house compliance officer or engage a boutique compliance firm depends on transaction volume, organizational scale, and overall budget strategy.
Under Monetary Authority of Singapore (MAS) expectations, the board and senior management remain ultimately accountable for compliance, regardless of whether the day-to-day work is handled internally or outsourced.
1. Financial Cost Tradeoffs
Cost Element | Full-Time In-House Compliance | Outsourced Boutique Firm |
Direct Retainer / Salary | S$120,000 – S$220,000+ / year for a mid-to-senior Head of Compliance. | S$36,000 – S$90,000 / year (typically S$3,000 – S$7,500/month for standard retainers). |
Variable / Fringe Costs | CPF contributions (17%), performance bonuses, medical benefits, and ongoing training (adds ~20–25%). | Fixed predictable monthly burn; minimal fringe overhead. |
Specialized Project Fees | Included in salary, but bandwidth is capped at 1 person. | Ad-hoc fees for complex scope (e.g., MAS audits, deep TRM assessments, or complex licensing changes). |
RegTech & Subscriptions | Firm must license its own AML/KYC screening software (World-Check, SentroWeb, etc.). | Boutique firms often bundle institutional-grade screening tools into their service package. |
Total Annual Burn Estimate | ~S$150,000 – S$270,000+ p.a. | ~S$45,000 – S$100,000 p.a. |
2. Practical & Operational Differences
In-House Compliance Officer
Deep Business Alignment: Sits in the deal flow, attends internal pitch reviews, and understands the exact commercial nuances of pending M&A or capital raising deals in real time.
Instant Turnaround: Immediate availability to review non-disclosure agreements (NDAs), investor onboarding, or conflict checks without vendor scheduling delays.
Key Person Risk & Capacity Limits: If the in-house officer resigns, the licensee faces an acute operational gap and must notify MAS. Bandwidth is limited during peak deal cycles.
Regulatory Exposure: Single individuals can succumb to internal commercial pressure from deal-makers to expedite onboarding or overlook minor conflicts.
Outsourced Boutique Firm
Broad Regulatory Perspective: Consultants work across multiple MAS-regulated entities, providing early insight into emerging regulatory trends, common audit focus areas, and MAS inspection themes.
Team Continuity: Provides institutional continuity—no single point of failure if a consultant leaves.
Operational Distance: External firms provide objective, unvarnished advice and are less vulnerable to internal commercial pressures.
Turnaround Friction: SLAs may dictate response times (e.g., 24–48 hours for KYC clearance or marketing material reviews), which can slightly slow deal execution speed.
3. MAS Expectations on Outsourced Compliance
If you choose the boutique firm route, MAS imposes strict governance requirements:
Designated In-House Oversight: MAS requires a Singapore-based Executive Director or Senior Officer within the CMS licensee to be designated as the internal owner of compliance, acting as the primary liaison for the boutique firm.
Outsourcing Framework Compliance: The engagement must comply with the MAS Guidelines on Outsourcing, requiring formal SLAs, regular vendor performance assessments, and robust data protection/confidentiality safeguards.
Tailored Policies, Not Templates: MAS routinely penalizes firms during inspections if the outsourced firm provides generic, off-the-shelf compliance manuals that fail to reflect the licensee’s actual corporate finance deal workflow.
Hybrid "Co-Sourcing" Model: A Common Middle Ground
Many growing corporate finance firms adopt a hybrid approach:
Internal Team: Assign a junior or mid-level internal manager (or split duties with an operational team member) to handle day-to-day administrative KYC, client onboarding documents, and routine deal logs.
Boutique Firm: Retain a boutique firm to handle second-line advisory—drafting regulatory filings, conducting annual compliance reviews, running independent AML audits, and managing complex regulatory queries from MAS.
How would you like to take this forward?
Review MAS Guidelines on Outsourcing
What key performance indicators (KPIs) and Service Level Agreement (SLA) terms should be included when contracting a Boutique Compliance Firm for a MAS CMS licensee
When contracting a boutique compliance firm for a Monetary Authority of Singapore (MAS) Capital Markets Services (CMS) licensee in corporate finance advisory, the agreement must balance commercial transaction speed with regulatory accountability.
Under the updated MAS Guidelines on Outsourcing, board members and senior management remain strictly accountable for compliance outcomes. The contract must be structured with explicit Service Level Agreements (SLAs), measurable Key Performance Indicators (KPIs), and clear risk-allocation clauses.
1. Key Performance Indicators (KPIs)
KPIs evaluate the quality, accuracy, and thoroughness of the vendor's regulatory oversight.
Core Compliance KPIs
┌──────────────────────┬──────────────────────┬──────────────────────┐
│ Regulatory Accuracy │ Deal Support Quality │ Operational Integrity│
│ • Zero Breach Rates │ • Tailored KYC/AML │ • Board & MAS Reports│
│ • 100% On-Time Returns│ • Audit-Ready Files │ • Annual AML Audits │
└──────────────────────┴──────────────────────┴──────────────────────┘
Regulatory Filings & Notifications On-Time Rate: 100% adherence to statutory deadlines (e.g., annual Form 25 submissions, quarterly MAS capital/financial returns, notifications of changes in key personnel or business models).
KYC & Deal Onboarding Compliance Defect Rate: 0% tolerance for incomplete Customer Due Diligence (CDD) files during random sampling or independent annual AML audits.
Regulatory Breach & Query Escalation Rate: Zero regulatory breaches or show-cause letters resulting from vendor oversight errors or missed regulatory updates.
Audit & Inspection Audit-Readiness: Zero "High Risk" or "Critical" findings related to outsourced compliance functions during independent internal audits or MAS supervisory inspections.
2. Service Level Agreement (SLA) Terms
SLAs define turnaround times (TAT) for day-to-day deal flows to ensure compliance does not bottleneck transaction momentum.
Service Domain | SLA Scope | Target Response / Turnaround Time |
Ad-Hoc Advisory | Direct regulatory queries, NDA conflict checks, or transaction structuring advice. | Standard: ≤24 hours. Urgent (Live Deal): ≤4 hours. |
Client Onboarding (CDD/AML) | Reviewing KYC/PEP/Sanctions screening for target companies, investors, or offerors. | Standard Case: ≤24–48 hours. Complex Case (Trusts/Offshore): ≤3 business days. |
Marketing Review | Reviewing pitch books, Information Memoranda (IMs), or teaser documents for regulatory compliance. | First Review: ≤48 hours. Final Sign-Off: ≤24 hours. |
Regulatory Notifications | Drafting MAS notifications for representative appointments (Form 3A) or director changes. | Drafted and finalized within 3 business days of receiving full underlying personnel data. |
Incident Reporting & STRs | Escalation of potential suspicious transactions (STRs) or material regulatory breaches. | Escalated to the designated internal Compliance Director within 2 to 4 hours of detection. |
3. Critical Contractual & Risk Clauses
To align with the MAS Guidelines on Outsourcing, standard commercial vendor contracts are insufficient. The agreement must explicitly incorporate specific regulatory provisions:
A. Access, Audit, and Inspection Rights
The contract must explicitly grant both the CMS licensee and MAS the unconditional right to audit the boutique firm's books, compliance logs, systems, and working papers relating to your business.
B. Continuity & Sub-Contracting Restrictions
Named Senior Consultants: Require the vendor to assign named, experienced key personnel to your account (preventing the "bait-and-switch" where senior partners pitch, but junior staff execute).
Prior Consent for Sub-Contracting: Explicitly prohibit the vendor from sub-contracting any portion of their compliance obligations (e.g., offshore screening desks) without prior written authorization from your board.
C. Data Protection & Cybersecurity
Compliance files contain sensitive non-public corporate finance information and ultimate beneficial owner (UBO) passports.
The SLA must stipulate adherence to the Personal Data Protection Act (PDPA) and compliance with MAS Technology Risk Management (TRM) guidelines for cloud storage or document portals used by the vendor.
D. Exit Strategy & Offboarding Assistance
In the event of contract termination, the vendor must guarantee the seamless transfer of all compliance registers, historical KYC dossiers, deal logs, and MAS correspondence to the licensee or a replacement vendor within 14 business days, with no data withholding rights.
4. Penalty & Performance Remediation Mechanisms
Service Fee Credits: Include a tiered fee deduction (e.g., 5% to 15% discount on the monthly retainer) if the vendor misses core SLAs (e.g., delayed MAS filings or recurring delays in deal KYC approvals) for two consecutive months.
Termination for Cause: Provide the CMS licensee immediate right of termination without penalty if the vendor commits a material breach, experiences a cyber/data leak involving your client records, or receives disciplinary action from MAS on other engagements.
How would you like to build on this framework?
Draft a template AML/KYC SLA schedule
Key Requirements under the MAS Guidelines on Outsourcing that apply when engaging an external compliance vendor
Under the Monetary Authority of Singapore (MAS) Guidelines on Outsourcing, engaging an external compliance vendor is classified as an outsourcing of a control function. Annex 1 of the guidelines explicitly categorizes third-party compliance, accounting, and actuarial services as outsourcing arrangements.
Because compliance directly affects a licensee's ability to adhere to financial regulations, outsourcing it requires strict compliance with several core regulatory expectations:
1. Ultimate Responsibility & Board Oversight
Non-Delegable Accountability: The primary pillar of the MAS framework is that outsourcing does not diminish responsibility. The Board of Directors and Senior Management of the CMS licensee remains strictly accountable for all compliance obligations and regulatory failures, regardless of vendor fault.
Designated Internal Officer: The licensee must appoint a Singapore-based Executive Director or Senior Officer as the designated internal owner responsible for overseeing the vendor, reviewing their work product, and acting as MAS's point of contact.
2. Assessment of Materiality
Licensees must determine whether the compliance outsourcing constitutes a "Material Outsourcing Arrangement."
Compliance outsourcing is almost always deemed material or high-risk because a failure by the vendor could severely impact the licensee's regulatory standing, reputation, or legal exposure.
Impact on Risk Profile: The firm must conduct a formal risk assessment evaluating operational risks, concentration risks, and data confidentiality before signing.
3. Pre-Engagement Due Diligence
Before contracting, the licensee must perform and document thorough initial due diligence on the compliance firm covering:
Technical Competence & Track Record: Verification of the vendor's experience with MAS regulations, capital market services, and corporate finance workflows.
Financial Viability: Assessing the vendor’s financial stability to ensure they can sustain operations without unexpected service disruptions.
Human Resources & Key Personnel: Evaluating the qualifications, experience, and integrity of the specific consultants assigned to your account.
Conflicts of Interest: Ensuring the compliance vendor does not represent competing entities or deal parties where a conflict could compromise their advice.
4. Mandatory Contractual Safeguards
The vendor agreement must be legally binding and contain standard MAS-mandated provisions:
Mandatory Provision | Regulatory Objective |
Audit & Inspection Rights | Unconditional rights for the licensee, its internal/external auditors, and MAS to inspect the vendor’s books, premises, and working files. |
Sub-contracting Limits | Prohibition against sub-contracting any compliance tasks (e.g., offshore CDD desks) without prior written approval from the licensee. |
Confidentiality & Data Protection | Strict safeguards governing non-public corporate finance information and customer data, aligned with the PDPA and MAS Technology Risk Management (TRM) guidelines. |
Business Continuity Management (BCM) | The vendor must maintain operational resilience and disaster recovery plans ensuring compliance monitoring continues during emergencies. |
Termination & Exit Strategy | Unilateral termination rights upon security breaches, vendor insolvency, or regulatory directive, alongside guarantees for data migration without withholding rights. |
5. Maintenance of the MAS Outsourcing Register
Licensees must maintain an up-to-date Outsourcing Register listing all active outsourcing arrangements (including external compliance vendors).
The register must capture details such as vendor corporate info, service scope, materiality status, country of service delivery, and the date of the most recent due diligence review.
This register must be made available to MAS upon request or during routine supervisory inspections.
6. Ongoing Monitoring & Independent Reviews
Periodic Reviews: Due diligence cannot be a one-off exercise. MAS requires at least an annual review of the compliance vendor’s performance, financial health, and adherence to SLAs.
Independent Audit: The outsourced compliance arrangement itself must be periodically audited by an independent party (such as an internal auditor or independent external reviewer) to verify that the vendor is operating effectively and that the licensee's internal oversight is robust.
How would you like to proceed with your outsourcing framework?
Download or review MAS Outsourcing Register template details
Review internal compliance oversight checklist for senior management
Draft a detailed SLA schedule for client onboarding and AML screening tailored for an outsourced compliance contract
Below is a comprehensive, production-ready Service Level Agreement (SLA) Schedule specifically drafted for client onboarding, Customer Due Diligence (CDD), and Anti-Money Laundering (AML) screening. It is structured to be appended as a Schedule to a Master Outsourcing Agreement between a MAS Capital Markets Services (CMS) Licensee (the "Licensee") and a Boutique Compliance Service Provider (the "Vendor").
SCHEDULE [X]: SERVICE LEVEL AGREEMENT (SLA) FOR CLIENT ONBOARDING AND AML/CFT SCREENING
1. Scope of Services & Workflow Architecture
The Vendor shall execute end-to-end Customer Due Diligence (CDD) and AML/CFT screening services for prospective corporate clients, investors, target entities, and connected parties of the Licensee in accordance with MAS Notice VCC-N01 / MAS Notice 626 (or equivalent CMS requirements) and the MAS Guidelines on Outsourcing.
CLIENT ONBOARDING WORKFLOW
┌────────────────┐ ┌────────────────┐ ┌────────────────┐ ┌────────────────┐
│ Phase 1: CDD │ │ Phase 2: Name │ │Phase 3: Adverse│ │ Phase 4: Final │
│ Document Intake│ ──> │ Screening │ ──> │ Media & Risk │ ──> │ Approvals & STR│
│ & Verification│ │ (Sanctions/PEP)│ │ Scoring Report │ │ Escalation │
└────────────────┘ └────────────────┘ └────────────────┘ └────────────────┘
2. Turnaround Time (TAT) Service Levels
All SLAs are measured from the point at which the Vendor receives complete, legible, and uncorrupted documentation from the Licensee or prospective client.
Risk Rating / Case Type | Definition & Scope | Target SLA Turnaround Time | Operational Cut-off |
Standard Risk (Individual) | Natural person connected party / UBO (≥25% shareholding). Standard passport/utility bill verification. | ≤8 business hours | 3:00 PM SGT (Submissions after 3:00 PM roll to T+1) |
Standard Risk (Corporate) | Standard onshore corporate structure (e.g., Singapore ACRA Pte Ltd) with clear ownership lines. | ≤24 business hours (1 Business Day) | 3:00 PM SGT |
High Risk / Enhanced Due Diligence (EDD) | Complex multi-layered entities, offshore vehicles (BVI, Cayman, Sey), Politically Exposed Persons (PEPs), or high-risk jurisdictions. | ≤48 business hours (2 Business Days) | 12:00 PM SGT |
Express / Live Deal Rush | Urgent transaction-linked onboarding (requires prior written activation flag from the Licensee). | ≤4 business hours | Immediate priority queue |
Name Screening False Positive Resolution | Disambiguation of potential matches against PEP, Sanctions, or RCA databases (e.g., Dow Jones, World-Check). | ≤4 business hours | Continuous execution |
STR Escalation | Suspicious Transaction / Red Flag detection and internal reporting to Licensee’s designated Compliance Officer. | Immediate (≤2 hours) | 24/7 Hotline / High-Priority Channel |
3. Key Performance Indicators (KPIs) & Operational Benchmarks
The Vendor shall be evaluated against monthly quantitative metrics. Failure to meet these thresholds will trigger remediation and fee credit mechanisms.
Metric ID | Performance Indicator | Benchmark Target | Calculation / Verification Method |
KPI-1 | SLA Adherence Rate | ≥98% of cases within designated TAT | Total Cases Meeting SLA / Total Onboarding Cases processed in calendar month |
KPI-2 | CDD Defect / Rejection Rate | <2% error rate | Files rejected by internal audit or MAS inspection due to missing UBOs, unverified sources of wealth, or bad documentation |
KPI-3 | Screening Accuracy | 100% (Zero tolerance for False Negatives) | Zero missed true-positive hits against UN Security Council, MAS Sanctions Lists, or OFAC registers |
KPI-4 | Re-verification On-Time Rate | ≥95% on-time completion | Ongoing periodic reviews completed within 30 days of the annual/biennial review due date |
KPI-5 | Staff Competency Maintenance | 100% compliant | All assigned Vendor staff must complete at least 10 hours of accredited CAMS/ICA or MAS AML training annually |
4. Vendor Obligations & Quality Assurance
Dual-Control Verification: Every EDD profile or complex entity file must undergo a Four-Eyes Review (prepared by a Junior Analyst, verified and signed off by a Senior Compliance Specialist prior to submission to the Licensee).
Audit Trail Maintenance: The Vendor shall maintain a complete, digital, and time-stamped audit trail for every screening run, false-positive clearing rationale, and risk-scoring calculation for a minimum of 5 years post-termination of client relationship.
Screening Tools & Systems: Screening must be conducted using commercial enterprise-grade databases (e.g., Refinitiv World-Check, LexisNexis Bridger, or Moody's Grid) covering:
UN Security Council Resolutions, MAS Sanctions, OFAC, EU, UK sanctions lists.
Foreign and domestic PEPs, including immediate family members and close associates (RCAs).
Global adverse media covering financial crime, fraud, corruption, and tax evasion.
5. Service Credits & Non-Performance Penalties
If the Vendor fails to achieve the required SLA thresholds in any given calendar month, the Licensee is entitled to deduct Service Credits from the Vendor’s monthly retainer/invoice as liquidated damages (and not as a penalty).
MONTHLY SERVICE CREDIT TIER
┌───────────────────────────┬───────────────────────────┬───────────────────────────┐
│ 95.0% – 97.9% SLA Rate │ 90.0% – 94.9% SLA Rate │ Below 90.0% SLA Rate │
│ │ │ │
│ 5% Credit on Monthly │ 15% Credit on Monthly │ 25% Credit + Default │
│ Retainer Invoice │ Retainer Invoice │ Notice / Termination │
└───────────────────────────┴───────────────────────────┴───────────────────────────┘
Repeated Failures: Missing the SLA threshold for two (2) consecutive months or experiencing a KPI-3 failure (False Negative on Sanctions) grants the Licensee the right to terminate the Agreement immediately for cause without penalty or notice period.
6. Access, Audit, and Regulatory Oversight (MAS Compliance Clause)
In compliance with the MAS Guidelines on Outsourcing:
Unconditional Access: The Vendor shall grant the Licensee, its internal and external auditors, and the Monetary Authority of Singapore (MAS) direct, unhindered access to inspect:
All CDD/AML records, operational screening logs, and risk reports related to the Licensee.
The Vendor’s physical premises, hosting centers, and operational procedures.
Sub-contracting Prohibition: The Vendor shall not sub-contract, re-assign, or offshore any portion of the CDD and AML screening services (e.g., to an overseas affiliate or third-party processor) without obtaining prior written approval from the Licensee's Board of Directors.
How would you like to build on this contract schedule?
Draft the Risk Scoring Matrix methodology annex
Draft the Data Protection & Confidentiality clauses
What are the specific details and records required to maintain a MAS Outsourcing Register for third-party compliance vendors?
Under the Monetary Authority of Singapore (MAS) Guidelines on Outsourcing, any MAS-regulated financial institution—including Capital Markets Services (CMS) licence holders—must maintain a comprehensive, up-to-date Outsourcing Register.
Because outsourcing a control function like compliance is explicitly categorized by MAS as a Material Outsourcing Arrangement, the register requires granular operational, governance, and risk tracking.
The mandatory fields, specific record details, and maintenance protocols required by MAS for a third-party compliance vendor are detailed below:
1. Core Categories & Required Fields for the Register
The MAS Outsourcing Register is typically maintained in a controlled, audit-ready format (such as the standard Annex 3 template in the MAS Guidelines or an internal governance portal). It is divided into 6 core sections:
MAS OUTSOURCING REGISTER STRUCTURE
┌─────────────────┬─────────────────┬─────────────────┬─────────────────┬─────────────────┐
│1. Vendor & Info │2. Scope & Materiality│3. Risk & Jurisdictions│4. Contract Dates │5. Oversight & Audit │
└─────────────────┴─────────────────┴─────────────────┴─────────────────┴─────────────────┘
Section A: Vendor Identification & Relationship Details
Service Provider Name: Legal entity name of the boutique compliance firm.
Corporate Registration Number (UEN): ACRA UEN (or equivalent foreign business registration).
Vendor Ownership Structure: Indicates whether the firm is an unrelated third party or an intragroup entity.
Registered Address & Operational Base: Primary business address and local Singapore office address.
Key Contact Person: Name, title, email, and phone number of the vendor's account lead/senior partner assigned to the Licensee.
Section B: Service Scope & Materiality Classification
Description of Outsourced Function: Specific description of compliance duties (e.g., "Second-line AML/CFT screening, client onboarding CDD reviews, regulatory reporting drafting, and quarterly MAS compliance testing").
Materiality Assessment Result: Classified as Material (outsourcing compliance is inherently deemed material because a failure directly impacts the firm's legal and regulatory standing).
Justification for Materiality: Documented rationale detailing the operational, regulatory, and reputational impact if the compliance vendor fails to perform.
Section C: Jurisdictional & Data Profile
Country/Location of Service Delivery: Where the compliance consultants physically perform the work (e.g., Singapore).
Data Storage Location: Country where client records, screening logs, and compliance working papers are hosted (e.g., local Singapore cloud servers vs. offshore data centers).
Disclosure of Customer / Confidential Information: A Yes/No flag indicating whether the vendor has access to non-public customer or deal data, along with data protection safeguard details.
Section D: Contractual Details & Timeline
Contract Effective Date: Start date of the Master Outsourcing Agreement.
Expiry / Renewal Date: Term end date and notice window for non-renewal.
Notice Period for Termination: Stipulated notice period for both standard termination and immediate termination for cause (e.g., material breach or cybersecurity incident).
Section E: Internal Oversight & Accountability
Designated Internal Officer: Name, title, and designation of the Singapore-based Executive Director or Senior Officer responsible for overseeing the vendor.
Alternative / Back-Up Arrangements: Brief summary of the firm's exit strategy or business continuity plan (BCP) if the compliance vendor suddenly ceases operations (e.g., "Internal compliance takeover by Designated Director or step-in agreement with secondary compliance provider").
Section F: Due Diligence & Audit Tracking
Date of Initial Due Diligence: Completion date of the pre-engagement due diligence review.
Date of Last Annual Due Diligence Review: The exact date the board or management conducted its most recent annual performance, financial viability, and compliance review.
Date of Last Independent Audit: Date when internal audit or an independent external reviewer audited the outsourced compliance framework.
2. Supporting Records & Verification Dossier
Simply keeping a line-item entry in an Excel table is insufficient. MAS expects the register entry to be backed by a Vendor Dossier containing the following underlying records:
Record Category | Mandatory Documents to Retain in Register Dossier |
Pre-Engagement Records | • Documented initial due diligence report (track record, CAMS/ICA credentials of staff, financial checks). • Formal Materiality Assessment Document signed off by the Board/Management. |
Legal & SLA Documents | • Fully executed Master Outsourcing Service Agreement. • Service Level Agreement (SLA) with measurable KPIs and turnaround times. • Signed Non-Disclosure Agreements (NDAs) and PDPA compliance undertakings. |
Ongoing Monitoring Records | • Monthly SLA performance logs and KPI scorecards. • Minutes of quarterly oversight meetings between the Designated Director and the vendor. • Annual Vendor Review reports assessing financial stability and service quality. |
Audit & MAS Correspondence | • Copies of independent internal/external compliance audit reports. • Records of any reported security breaches, data leaks, or regulatory notifications submitted to MAS. |
3. Regulatory Submission & Maintenance Rules
Submission Frequency: The Outsourcing Register must be updated continually and submitted to MAS at least annually, semi-annually (for banking institutions), or immediately upon MAS's supervisory request.
Review Cadence: For material functions like compliance, the underlying details in the register must undergo a formal, documented management review at least once every 12 months.
Retention Period: Records, register history, and archived vendor dossiers must be retained for at least 5 years after the termination of the outsourcing arrangement.
How would you like to structure your outsourcing register?
Draft an Annual Vendor Review template
What routine oversight activities should an appointed Director perform to monitor an outsourced Compliance firm under MAS guidelines
Under the Monetary Authority of Singapore (MAS) Guidelines on Outsourcing (and the broader Third-Party Risk Management framework), the board and senior management cannot delegate regulatory accountability.
When a Capital Markets Services (CMS) licensee or regulated firm delegates compliance tasks to a boutique firm, the appointed designated Director must execute active, routine oversight across four key operational cadences:
ROUTINE DIRECTOR OVERSIGHT CADENCE
┌─────────────────┬─────────────────┬─────────────────┬─────────────────┐
│ 1. Live Deal / │ 2. Monthly SLA &│ 3. Quarterly │ 4. Annual │
│ Per-Case │ KPI Reviews │ Governance & │ Re-assessment│
│ Spot Checks │ Deduction Logs │ MAS Registers│ & Audits │
└─────────────────┴─────────────────┴─────────────────┴─────────────────┘
1. Operational Cadence & Specific Oversight Tasks
A. Live Deal & Per-Case Spot Checks (Ongoing / Real-Time)
The Director must not act as a passive rubber-stamp for vendor-prepared files. Real-time oversight duties include:
High-Risk Case Sign-Off: Reviewing and explicitly approving all Enhanced Due Diligence (EDD) profiles, Politically Exposed Persons (PEPs), or high-risk institutional clients flagged by the vendor before deal sign-off.
Random File Sampling: Conducting quarterly or ad-hoc sampling of routine Customer Due Diligence (CDD) dossiers cleared by the vendor to verify that source-of-wealth checks and ultimate beneficial ownership (UBO) trees are fully substantiated.
Disambiguation Review: Reviewing and endorsing the rationale recorded by the vendor when clearing false-positive hits against UN, MAS, or OFAC sanctions databases.
B. Monthly SLA & KPI Reviews
Every month, the Director must formalize the operational evaluation of the vendor:
KPI Scorecard Verification: Reviewing the vendor’s monthly performance report against agreed Service Level Agreements (SLAs)—focusing on:
Onboarding turnaround times (TATs).
Error/rejection rates during file reviews.
Quality of draft regulatory submissions (e.g., representative appointments via Form 3A).
Penalty & Fee Credit Enforcement: Authorizing service fee deductions if the vendor misses core SLAs (e.g., delayed screening or incomplete AML files).
Open Query Tracking: Reviewing outstanding regulatory queries or delayed deal-onboarding cases to ensure the vendor is not creating deal bottlenecks.
C. Quarterly Governance & Regulatory Updates
Every quarter, the Director ensures the firm's compliance posture remains aligned with evolving MAS requirements:
Regulatory Register Update: Formally approving and dating updates to the firm's mandatory MAS Outsourcing Register to reflect any changes in vendor scope, assigned key personnel, or service locations.
Incident & STR Oversight: Reviewing all potential Suspicious Transaction Reports (STRs) or material compliance red flags escalated by the vendor during the quarter.
Regulatory Horizon Scanning: Meeting with the vendor’s senior consultants to review new MAS consultation papers, circulars, or statutory notices affecting corporate finance operations.
D. Annual Comprehensive Due Diligence & Audit (Yearly)
Under MAS rules, outsourcing arrangements must undergo a formal annual re-evaluation:
Vendor Financial & Operational Re-Assessment: Re-evaluating the vendor’s financial viability, staffing levels, CAMS/ICA accreditation maintenance, and key-person turnover.
Independent Audit Oversight: Commissioning an independent internal audit or third-party audit review of the outsourced compliance function to evaluate controls, data confidentiality (PDPA), and operational effectiveness.
Business Continuity Plan (BCP) Testing: Verifying that the vendor tests its operational resilience and data backup procedures annually to ensure continuous monitoring during disruptions.
Board Reporting: Presenting an annual written report to the Board of Directors summarizing the performance, risks, and audit findings associated with the outsourced compliance firm.
2. Director Oversight Activity Summary
Oversight Frequency | Core Oversight Deliverable / Record | Key Focus Area |
Real-Time / Per Deal | Signed EDD profiles & Sanctions Clearing Logs | High-risk approvals, PEP checks, UBO verification. |
Monthly | Monthly KPI Scorecard & SLA Review Log | Turnaround adherence, defect rates, service fee credits. |
Quarterly | Board Compliance Report & Updated MAS Register | Register accuracy, STR tracking, regulatory updates. |
Annually | Annual Due Diligence Review & Independent Audit Report | Vendor viability, BCP testing, overall risk assessment. |
3. Recommended Oversight Audit Trail
To prove "effective governance" during a MAS supervisory inspection, the appointed Director should maintain an Oversight Logbook containing:
Minutes of Periodic Meetings: Documented notes from monthly/quarterly meetings with the outsourced compliance lead.
Written Decision Log: Clear email or portal approval records showing the Director reviewed and approved high-risk onboardings or regulatory filings.
Audit & Review Dossier: Signed copies of annual vendor reviews and independent compliance audit reports.
What are the business conduct requirements?
For a Capital Markets Services (CMS) Licensee or exempt corporate finance (CF) adviser in Singapore, business conduct requirements are governed by the Securities and Futures Act 2001 (SFA), the Securities and Futures (Licensing and Conduct of Business) Regulations (SF(LCB)R), and specifically MAS Notice SFA 04-N21 (Notice on Business Conduct Requirements for Corporate Finance Advisers).
These regulations set mandatory baseline standards across governance, conflicts of interest, customer asset safeguards, and transaction due diligence.
1. General Governance & Operational Requirements
A CF adviser must establish internal policies, procedures, and oversight mechanisms proportional to its business scale:
Independent Compliance Function: Maintain an adequate and independent compliance oversight function located in Singapore to monitor regulatory adherence.
Fit and Proper Standards: Ensure all appointed representatives, directors, and key management continuously satisfy MAS's Fit and Proper Criteria regarding honesty, integrity, competence, and financial soundness.
Record Keeping: Retain all client communications, engagement agreements, transaction advice, and due diligence dossiers for a minimum statutory period (typically 5 to 7 years).
Supervision & Management Oversight: Ensure senior management exercises effective control over deal teams, pitch materials, and transaction execution.
2. Conflicts of Interest & Fair Treatment
Under Part 1 of MAS Notice SFA 04-N21:
Conflict Identification & Isolation: Put in place robust systems to identify actual or potential conflicts between the CF adviser's own interests (or affiliate interests) and those of the client.
Information Barriers ("Chinese Walls"): Maintain structural physical and logical information barriers to prevent price-sensitive or confidential deal data from leaking across advisory, proprietary trading, or investment arms.
Disclosure Requirements: Promptly disclose material conflicts of interest to the client in writing prior to accepting an engagement or proceeding with advice.
Segregation of Duties: Ensure deal execution personnel are separate from supervisory or compliance personnel evaluating transaction risks.
3. Mandatory Due Diligence Standards (Notice SFA 04-N21)
MAS imposes specific due diligence obligations on CF advisers when executing transactions:
CF ADVISER DUE DILIGENCE FRAMEWORK
┌──────────────────────┬──────────────────────┬──────────────────────┐
│ 1. Verification │ 2. Listing / Market │ 3. External Experts │
│ & Assessment │ Transactions │ & Third Parties │
│ • Validate statements│ • Reasonable grounds │ • Verify competence │
│ & client data │ on issuer suitability│ • Independently │
│ • Monitor new facts │ • Senior management │ evaluate work │
│ & contradictions │ oversight │ product │
└──────────────────────┴──────────────────────┴──────────────────────┘
General Transaction Due Diligence: Advisers must exercise reasonable care, skill, and diligence. This includes assessing the accuracy and completeness of information provided by clients, verifying material facts, and monitoring ongoing developments that might contradict prior disclosure.
Singapore Exchange (SGX) Listings & RTOs: When acting as issue manager, sponsor, or lead financial adviser for a public listing or reverse takeover (RTO):
Must have reasonable grounds to believe the issuer is suitable for listing.
Ensure the issuer's directors and key executives understand their statutory and listing rule obligations.
Reliance on Experts: If engaging third-party experts (e.g., independent valuers, legal counsel, technical auditors) for transaction due diligence, the adviser must verify the expert's qualifications/independence and independently evaluate their findings—not rely on them blindly.
4. AML/CFT & Customer Protection
Anti-Money Laundering & Countering Financing of Terrorism: Strictly follow MAS Notice VCC-N01 / Notice 626 standards for Customer Due Diligence (CDD), ultimate beneficial owner (UBO) identification, Politically Exposed Persons (PEP) screening, and ongoing monitoring.
Customer Moneys & Assets Safeguards: If handling client funds (e.g., offer proceeds or escrow), funds must be held in segregated bank accounts with licensed banks in Singapore and reconciled continuously under the SF(LCB) Regulations.
Prohibition of False or Misleading Statements: Strict adherence to Section 199/200 of the SFA prohibiting false, misleading, or deceptive representations in pitch books, Information Memoranda (IMs), or regulatory filings.
Key Regulatory References
Regulation / Guidance | Primary Focus |
Notice SFA 04-N21 | Business conduct and mandatory due diligence requirements for CF advisers. |
SF(LCB) Regulations | Licensing requirements, segregation of client assets, financial resources, and record retention. |
SFA Part 4 & Section 101 | Statutory power of MAS to issue binding conduct directions and enforce penalties. |
MAS Guidelines on Outsourcing | Standards governing governance and risk oversight when using external service providers. |
How would you like to explore these conduct requirements further?
Review Due Diligence requirements under Notice SFA 04-N21
Examine Chinese Wall & conflict management policies
Comments