SEC Custody Rule
The SEC Custody Rule — Rule 206(4)-2 under the Investment Advisers Act of 1940 — is the rule that governs registered investment advisers who have custody of client funds or securities. “Custody” means holding client assets, or having any authority to obtain possession of them, including through fee deduction or first-party transfer authority. The rule is designed to protect client assets from loss, misuse, or misappropriation.
What the Custody Rule Requires
- Qualified custodian — client funds and securities must generally be held by a qualified custodian, such as a bank or registered broker-dealer.
- Account statements — the qualified custodian must send account statements directly to clients at least quarterly.
- Surprise examination — advisers with custody are, in many cases, subject to an annual surprise examination by an independent public accountant.
- Notice to clients — clients must be notified of the custodian holding their assets.
The IT and Controls Dimension of Custody
Because custody concerns the ability to move client assets, the systems and access controls around that ability are central to compliance. Advisers must control who can authorize transfers, maintain reconciliations between adviser records and custodian records, and protect the credentials and systems used to access custodial platforms. Weak access controls, shared logins, or unmonitored transfer authority are precisely the conditions that lead to asset misappropriation — the harm the Custody Rule exists to prevent.
Why the Custody Rule Matters for Investment & Professional Firms
For DFW registered investment advisers and wealth management firms, custody is one of the highest-risk areas an SEC examination reviews. The technology controls behind custody — privileged access management over custodial platforms, phishing-resistant multi-factor authentication, transfer-authorization workflows, and reconciliation — are where IT and compliance intersect directly. DKBinnovative helps investment-firm clients in Plano, Frisco, Irving, and Las Colinas implement and document the access controls that protect client assets and support Custody Rule compliance.