For broker-dealer compliance teams, the FINRA regulatory calendar moves on two tracks simultaneously: formal rule amendments that require written supervisory procedure updates, and Regulatory Notices and guidance documents that adjust how FINRA expects existing rules to be interpreted and supervised. Both tracks create policy obligations. Neither track waits for your next annual compliance review.
This post focuses on the rule amendments and Regulatory Notices from the 2024 cycle with the highest frequency of written supervisory procedure impact — the ones that, based on the structure of what changed, are most likely to require direct updates to your WSPs rather than just operational adjustments. I'm working from the perspective of someone who spent time as an examiner and now spends time helping compliance teams figure out which FINRA communications actually require policy action versus which ones can be addressed through supervisory memoranda or training.
FINRA's Regulatory Notice Framework and Why It Matters for WSP Maintenance
Before getting into specific amendments, it's worth being precise about the document types, because compliance teams routinely conflate them in ways that create policy gaps. A formal rule amendment — a change to a FINRA rule number in the FINRA Rulebook — typically requires a written supervisory procedure update that references the amended rule. A Regulatory Notice, by contrast, is interpretive guidance or a statement of examination priorities; it doesn't change the rule text, but it frequently changes what examiners expect to see in your supervisory framework.
The policy implication: Regulatory Notices don't automatically require WSP amendments, but they frequently require supervisory documentation updates, training records, or internal policy annotations that clarify how the firm is applying the notice's guidance. When an examiner asks whether your firm addressed a particular Regulatory Notice, they're not necessarily asking whether you rewrote your WSPs — but they are asking whether there's documented evidence that the firm considered it and took appropriate supervisory action.
A WSP audit checklist that only tracks formal rule amendments will systematically miss the Regulatory Notice obligations. A complete checklist tracks both.
Key 2024 FINRA Amendments: The WSP Impact Summary
FINRA Rule 4370 (Business Continuity Plans): Amendments in 2024 clarified the scope of business continuity plan obligations, particularly regarding third-party vendor dependencies in critical operations. The policy implication is direct: if your BCP section of the WSPs references technology vendors or clearing firm dependencies without addressing how those dependencies are monitored and what your continuity path is if they fail, this amendment warrants a WSP update. The most common gap we see: BCPs written before cloud-hosted systems became standard infrastructure, where the vendor dependency section doesn't account for the fact that your critical operations now live on third-party platforms.
FINRA Rule 3110 (Supervision) — Regulatory Notice 24-09: FINRA's guidance in 2024 on supervision of digital communications and off-channel communications represents an exam priority, not a formal rule change. That said, exam findings on this topic have been consistent enough across the industry that firms without documented supervisory procedures for digital communications review are carrying material examination risk. The WSP gap to close: if your communications surveillance procedures reference email and recorded phone lines as the scope of supervision without addressing firm-approved electronic communications platforms and the policy for unapproved communications, this needs attention.
FINRA Rule 4512 (Customer Account Information): Updates to the beneficial ownership and customer identification requirements that flow from FinCEN's CDD Rule have continued to generate examination findings at broker-dealers. If your account opening and maintenance WSPs still describe customer identification in terms that predate the legal entity customer beneficial ownership requirements, this is an area where a targeted WSP review is warranted even if no direct FINRA rule amendment has occurred — because the examination standard has moved.
The WSP Sections Most Frequently Affected by FINRA's 2024 Cycle
Based on the pattern of 2024 FINRA communications and the examination areas they signal, the WSP sections with the highest probability of needing review are:
Communications and Correspondence Supervision: This section needs to address the full scope of firm-approved communication channels, the frequency and methodology of supervisory review, and the escalation path when unapproved channels are identified. The breadth of what counts as "correspondence" in the current examination environment is significantly wider than the WSPs written five years ago typically contemplate.
Outside Business Activities and Private Securities Transactions: FINRA's examination attention to OBA disclosure and supervisory review has remained high. If your OBA WSP section describes a disclosure and acknowledgment process without describing the supervisory review that follows disclosure — what the supervisor is expected to do with the disclosure, how conflicts are assessed, when escalation to compliance is required — this section merits review.
Reg BI Suitability and Best Interest Documentation: Firms that updated their WSPs for initial Reg BI implementation in 2020 and haven't revisited them since are likely carrying documentation gaps. The examination findings from FINRA's Reg BI exam cycle have been specific: reviewers are looking for evidence that the best interest determination is documented at the point of recommendation, not reconstructed after the fact. If your WSP describes the obligation without describing the documentation standard and where that documentation lives, the procedural record won't satisfy examination scrutiny.
How to Prioritize the Review When You Have a Full Calendar
Compliance teams don't have unlimited time for WSP reviews, and a checklist that says "review everything" is not operationally useful. A practical prioritization approach starts with impact and examiner attention as the two axes.
Impact means: does this WSP section govern a high-volume, client-facing activity? Communications supervision, account opening, recommendation documentation — these are high-impact sections because errors compound across many transactions. Low-volume internal procedures carry lower exam risk from volume alone.
Examiner attention means: has FINRA signaled this area in its annual regulatory priorities letter, in examination findings publications, or in recent enforcement actions? When FINRA explicitly states that digital communications supervision is an examination priority, that's an unambiguous signal. WSP sections in signaled areas should go to the front of the review queue regardless of whether a formal rule amendment has occurred.
The cross-product of high-impact and signaled-area produces a short list of four to six WSP sections that warrant review before your next annual compliance assessment. For most broker-dealers in 2024, that list is: digital communications supervision, OBA/PST disclosure and review, Reg BI best interest documentation, BCP third-party dependencies, AML/CDD beneficial ownership, and cybersecurity incident response procedures.
A Note on Using Regulatory Notices as Your WSP Update Trigger
We'd push back on the common practice of waiting for formal rule amendments before conducting WSP reviews. FINRA's enforcement and examination mechanism includes the concept of supervisory failure as a standalone violation — a firm can be found to have failed to supervise even without a formal rule violation by an associated person, if the supervisory procedures were inadequate to detect or prevent the potential violation.
This means that examination priority signals from FINRA — not just formal rule changes — create real compliance exposure when ignored. Treating Regulatory Notices as optional reading until the formal amendment arrives is a strategy that works right up until you're in an examination and an examiner asks whether your firm reviewed Regulatory Notice 24-09 and what supervisory action resulted.
The way we've structured Pensvyne's FINRA monitoring layer reflects this: Regulatory Notices and formal rule amendments are both classified and mapped to WSP sections. The distinction between the document types is preserved in the gap assessment — a Regulatory Notice maps to a "supervisory documentation" gap rather than a "rule reference" gap — but neither type is treated as optional for the purpose of policy impact assessment.
Annual Certification Timing and What to Have Ready
FINRA Rule 3130 requires annual certification by the firm's chief executive officer that the firm has processes in place to establish, maintain, review, test, and modify written compliance policies and supervisory procedures. The certification is only as strong as the process behind it. A compliance team that can demonstrate a documented, date-stamped process for reviewing and updating WSPs in response to regulatory changes — with a clear record of which changes were reviewed, which triggered updates, and which were assessed and determined not to require updates — is in a fundamentally different examination position than one that updates WSPs only when someone notices a gap during exam prep.
The checklist approach to WSP maintenance is not wrong, but it's insufficient on its own. A checklist shows what you looked at; the exam record needs to show how you decided what to update and why.