Korea's FSS tells 21 securities firms to shift to preventive internal audits
In short
The Financial Supervisory Service met auditors from 21 securities firms in Seoul on Oct 7 and told them to move from audits that catch problems after the fact to preventive checks that protect investors first. The regulator cited repeated violations such as false or incomplete information in product prospectuses and investment pitches made from personal mobile phones that left no record. It also asked firms to fully re-check IT security after recent personal data hacking cases and to make its credit-lending self-management plan work in practice.
Read the full story 2 min read
The Financial Supervisory Service held a meeting with the auditors of 21 securities firms at the Korea Financial Investment Association in Yeouido, Seoul, on Oct 7, the FSS said. The regulator used the session to share findings from recent inspections of the financial investment sector and to press firms to move away from audits that catch wrongdoing only after the fact toward preventive auditing centred on investor protection. [ 1 , 3 , 4 ]
Seo Jae-wan, the FSS deputy director-general for the financial investment sector, said the securities industry's rapid growth had been built on investor expectations of fairness and transparency in the capital market, and that firms should ask whether their current internal control levels meet those expectations. He said repeated violations — including false or incomplete information in customer product prospectuses and sales pitches made from personal mobile phones that left no record of the recommendation — showed internal controls were not working, and that firms' audit organisations should focus on preventing harm to investors rather than looking back after it occurs. [ 1 , 3 , 4 ]
The FSS also asked chief executives not to treat internal audit as a mere cost and to support audit capacity with staff and budget. It said auditors should examine objectively whether investor protection processes are actually functioning across sales operations, and it shared guidance on product design and manufacturing and on stock lending in liquidity provider work. [ 1 , 3 , 4 ]
On recent personal data hacking cases in the financial sector, the FSS told firms to comprehensively re-check their IT security and inspection systems, identify any possible investor harm quickly and carry out protective measures. It asked the auditors to make sure the credit-lending self-management plan takes hold by thoroughly explaining it to investors; under the plan, firms voluntarily keep credit provision within 90% of their equity, down from 100%, and voluntarily reduce margin lending when a single stock exceeds 15% of their total margin loans. Auditors were also asked to check whether follow-up measures under the advertising improvement plan to curb false and exaggerated advertising are being implemented properly. [ 1 , 3 ]
Auditors at the meeting agreed that preventive audits from an investor-centred perspective are needed, according to the FSS, and said they would check whether investor protection and risk management systems work across business operations and would strengthen internal controls through their own audits and consulting inspections in cooperation with the supervisory authority. The FSS said it will continue supporting securities firms' preventive internal audit functions and audit capacity and will keep listening to and communicating with the market. [ 1 , 4 ]
Why it matters
The meeting shows the securities regulator pressing firms to strengthen internal controls before problems reach investors, which officials tied to investor expectations of fairness and transparency in the capital market. Firms that follow through may face higher spending on audit staffing, IT security and compliance, while the credit-lending guidance touches how much margin lending they extend and how concentrated it is in single stocks. The documents do not state any new penalties or rules, only supervisory guidance and follow-up checks.
Key facts
- The Financial Supervisory Service (FSS) held a meeting with auditors from 21 securities firms at the Korea Financial Investment Association on Oct 7. [ 1 , 3 , 4 ]
- FSS deputy director-general for the financial investment sector Seo Jae-wan told the meeting that securities firms' current level of internal control requires fundamental reflection. [ 2 , 3 , 4 ]
- Seo cited repeated violations including false or incomplete information in customer product prospectuses and the use of personal mobile phones for sales pitches with no record kept. [ 1 , 3 , 4 ]
- The FSS asked firms to convert internal audits from after-the-fact detection to preventive auditing focused on investor protection. [ 1 , 2 , 3 , 4 ]
- Firms were asked to fully re-check their IT security systems in connection with recent personal data hacking cases in the financial sector and to quickly identify and address possible investor harm. [ 1 , 3 , 4 ]
- The FSS asked firms to explain its credit-lending self-management plan to investors so it takes hold: keeping credit provision within 90% of equity and voluntarily reducing margin lending when a single stock exceeds 15% of total margin loans. [ 1 , 3 ]
- The FSS also asked auditors to check whether follow-up measures under its advertising improvement plan to curb false and exaggerated advertising are being carried out properly. [ 1 , 3 ]
- Auditors at the meeting agreed on the need for preventive audits and said they would strengthen internal controls in cooperation with the supervisory authority. [ 1 , 4 ]
Confirmed by several sources
- The FSS met auditors from 21 securities firms at the Korea Financial Investment Association on Oct 7 to discuss strengthening investor-focused internal audit functions. [ 1 , 3 , 4 ]
- The FSS called for preventive rather than after-the-fact auditing and cited repeated basic rule violations, including false or incomplete product prospectuses. [ 1 , 2 , 3 , 4 ]
- The FSS asked securities firms to re-check IT security amid recent personal data hacking cases in the financial sector. [ 1 , 3 , 4 ]
Still unclear
- The documents mention recent personal data hacking cases in the financial sector but give no details of which institutions were affected or how many people were harmed. Single-source or vague: documents 1, 3 and 4 refer to the incidents only as context for the IT security request, without specifics.
- Whether the credit-lending self-management plan is binding or voluntary. Documents describe the measures as self-managed ('자율 관리') without stating whether the FSS can enforce them.
- What specific new commitments, if any, firms made beyond agreeing with the need for preventive audits. Documents report general agreement and pledges of cooperation but no concrete measures from individual firms.
- The exact time and duration of the meeting. Documents give the date and venue but no start time; only publication times of the reports are available.
What local media are saying
Timeline, local time
- Reports from Asia Economy, Newsis and Electronic Times describe the FSS meeting with 21 securities firm auditors and its calls for preventive internal audits. [ 1 , 2 , 3 ]
- Seoul Economic Daily reports Seo Jae-wan's remark that internal control requires fundamental reflection, adding the IT security re-check request. [ 4 ]