Outsourcing vs. Bringing Compliance In-House: A Guide for Municipal Advisors

After supporting hundreds of municipal advisors over the past 15 years, we've seen firms succeed with both approaches, and struggle with both when the fit isn't right. This article discusses the key considerations to help you make an informed choice. Understanding Your Compliance Needs Before comparing outsourcing versus in-house options, it's crucial to understand what compliance actually means for a municipal advisor: Core Compliance Functions: - SEC and MSRB registration and filings (Forms MA, MA-I, A-12, G-37, G-44) - Written Supervisory Procedures (WSPs) development and maintenance - Annual training programs and continuing education - Political contribution monitoring and reporting - Surveillance and testing of trading activities - Books and records management - Client disclosure and documentation (Rule G-42) - Annual compliance reviews and certifications - Regulatory examination preparation and support - Staying current on rule changes and guidance Ultimately, even small municipal advisory firms face the same regulatory requirements as larger ones. A two-person MA firm must comply with the same MSRB and SEC rules as a 50-person firm. The question is how to meet these obligations most effectively. The In-House Compliance Officer: Pros and Cons Advantages of In-House Compliance 1. Immediate Availability An in-house compliance officer is there every day, available for real-time questions and issues. Need pre-approval for a political contribution? They're down the hall. Question about a client disclosure? You can walk into their office. 2. Deep Firm Knowledge An internal CCO develops intimate knowledge of your firm's business model, clients, personnel, and culture. They understand the nuances of your operations without needing to be brought up to speed. 3. Cultural Integration In-house compliance becomes part of your team culture. They participate in business discussions, understand strategic priorities, and can integrate compliance thinking into business development. 4. Dedicated Attention Your firm is their only job. They're not juggling multiple clients or dividing attention across different organizations. 5. Control and Visibility Management has direct oversight of the compliance function. You control their schedule, priorities, and workflow. Challenges of In-House Compliance 1. Cost Structure A qualified compliance officer commands a significant salary: typically $100,000-$150,000+ for someone with municipal securities experience. Add benefits (10-40%), and your total compensation package is $110,000-$210,000 annually. For perspective: A small-to-mid-sized firm could pay for 5-10 years of outsourced compliance consulting with the amount an in-house compliance officer would cost in a single year. 2. Finding Qualified Talent Municipal securities compliance is a specialized field. Finding someone with: - Municipal advisor regulatory knowledge (not just broker-dealer experience) - MSRB rule expertise - Form MA/G-37/G-44 experience - Testing and surveillance skills - SEC examination experience ...is challenging. The talent pool is small, and competition is fierce. 3. Limited Expertise Depth One person has one background, one perspective, one set of experiences. When facing a complex regulatory question or unusual situation, your CCO may not have encountered it before. Who do they consult? 4. Knowledge Gaps During Absence When your compliance officer takes vacation, gets sick, or leaves the firm, who handles compliance? Regulators look for consistency across years, and changes in personnel can lead to gaps in coverage. Cross-training other staff is difficult given the technical knowledge required. 5. Narrow Regulatory Focus An individual CCO typically has expertise in specific areas based on their background. They may be strong in MSRB rules but less experienced with SEC examination issues, or vice versa. Outsourced Compliance: Pros and Cons Advantages of Outsourcing 1. Deep Bench of Expertise When you engage a compliance consulting firm, you get access to a team with diverse backgrounds and experiences. At ARS, for example, our team includes former Managing Directors from major Wall Street firms with combined 50+ years of municipal securities experience. Need help with a Form G-37 issue? You get someone who's handled hundreds of political contribution cases. Examination coming up? You work with someone who's supported dozens of exams. 2. Cost Efficiency Outsourcing typically costs a fraction of in-house salary and benefits for small-to-mid-sized MA firms. You get senior-level expertise at a fraction of senior-level compensation. 3. Scalability Your company will need differing levels of coverage depending on the scenario. An in-house provider may be able to manage the workload associated with annual surveillance, but outsourced compliance firms can staff 3-4 individuals to provide supplemental coverage during an audit. 4. No HR Complications No recruiting, hiring, training, performance reviews, benefits administration, or turnover concerns. If someone leaves the consulting firm, it's their problem to replace them, not yours. 5. Regulatory Knowledge Breadth Consultants work with multiple firms across different structures and business models. They've seen more scenarios, regulatory positions, and solutions than any single in-house person could encounter. 6. Fresh Perspective External consultants bring objectivity. They're not embedded in your firm's culture or politics. They can identify issues that might be overlooked internally and provide unbiased advice. 7. Examination Support When the SEC or MSRB comes calling, your consultant has supported numerous examinations. They know what examiners look for, how to prepare documentation, and how to respond to requests. 8. Network Effects Consultants learn from every client they serve. A regulatory development informs their guidance to all clients. You benefit from this collective experience. Challenges of Outsourced Compliance 1. Not On-Site Daily Consultants aren't in your office every day. While they're available by phone, email, and video, there's no walking down the hall for a quick question. (Though many firms find scheduled check-ins actually improve compliance discussions.) 2. Ramp-Up Time New consultants need to learn your business. While good consultants accelerate this through structured onboarding, there's still an initial learning curve. 3. Relationship Dependency Your compliance function depends on maintaining a good working relationship with your consultant. If the relationship sours, transitioning can be disruptive. 4. Communication Requirements Outsourcing requires proactive communication. The consultant needs to be kept informed of business developments, personnel changes, and new client relationships. Top outsourced compliance firms will proactively ask questions to ensure nothing is missed. Decision Framework: Which Approach Is Right for You? Consider In-House Compliance If: - Your firm has 20+ professionals requiring daily compliance support - You have the budget ($100,000-$200,000+ annually) for a qualified CCO plus technology and resources - You can attract quality talent in your market and offer competitive compensation - Your business model is stable and you need consistent, predictable compliance support - You value immediate, on-site availability above cost efficiency - You have complex, unique situations that require someone fully immersed in your business Consider Outsourced Compliance If: - Your firm has fewer than 20 professionals with complex operations requiring depth of experience - Cost efficiency is important and you want senior-level expertise without senior-level salaries - You're growing and need flexibility to adjust compliance support - You want access to diverse expertise across municipal securities, SEC, and MSRB areas - You value objectivity and independent oversight - You have limited HR bandwidth for recruiting and managing compliance personnel - You need daily presence but want specialized backup Common Misconceptions Myth #1: "Outsourcing means the firm doesn't take compliance seriously." Reality: Many sophisticated firms outsource compliance precisely because they take it seriously. They want the best expertise, not just any warm body in the role. Myth #2: "You can't outsource CCO responsibilities." Reality: While the firm remains ultimately responsible under Rule G-44, compliance functions can absolutely be outsourced. Many firms designate their consultant or a principal as CCO. Myth #3: "In-house is always better for client confidence." Reality: Clients care about competent compliance, not organizational charts. A firm with deep outsourced expertise often inspires more confidence than one with a junior in-house CCO. Myth #4: "Outsourcing is only for small firms." Reality: Firms of all sizes outsource. In fact—ARS works with multiple of the top 5 and top 10 largest municipal advisory firms. Questions to Ask When Evaluating Consultants If you're considering outsourcing, ask potential consultants: Experience Questions: 1. How many municipal advisor clients do you serve? 2. What's your team's background in municipal securities? 3. How many SEC and MSRB examinations have you supported? 4. Can you provide client references? Service Questions: 1. What's included in your standard engagement? 2. How do you handle urgent questions or issues? 3. What's your response time commitment? 4. Do you provide backup coverage when our primary contact is unavailable? Process Questions: 1. How do you onboard new clients? 2. What's your approach to annual compliance reviews? 3. How do you stay current on regulatory developments? 4. What technology and tools do you provide? Cost Questions: 1. What's your fee structure? 2. What's included and what costs extra? 3. How do costs scale if our firm grows? Compatibility Questions: 1. How do you communicate with clients (calls, video, email)? 2. Can we meet the team who would work with us? 3. What's your approach to risk tolerance and business partnership? 4. How do you handle disagreements about compliance decisions? Red Flags (Both In-House and Outsourced) Warning Signs for In-House Candidates: - Limited municipal securities experience (mostly broker-dealer background) - Unwilling to challenge management decisions - Weak technical knowledge of MSRB and SEC rules - No examination experience - Inability to articulate how they'd handle complex scenarios - Asking for authority without accountability Warning Signs for Consultants: - One-size-fits-all approach to compliance programs - Unwilling to provide client references - Unclear about what's included in fees - No municipal advisor specialization - Can't articulate their examination support process - Promises that seem too good to be true ("100% guarantee no deficiencies") - High-pressure sales tactics Making the Transition Transitioning to Outsourced Best Practices: 1. Document everything: Gather all compliance documentation, filings, and records 2. Exit interview: Have departing CCO document pending items and historical issues 3. Introductory period: Plan for 30-60 days of intensive consultant onboarding 4. Staff communication: Explain the change and how it will work to your team 5. Client communication: If appropriate, inform key clients about your enhanced compliance support TL;DR There's no universally correct answer to the outsourcing versus in-house question. The best choice depends on your firm's specific circumstances: In-house compliance works best for larger firms with daily needs, stable budgets, and the ability to attract top talent. It provides daily presence, deep firm knowledge, and cultural integration. Outsourced compliance works best for small-to-mid-sized firms seeking cost efficiency, scalability, and access to deep expertise. It provides senior-level knowledge at a fraction of in-house costs, with the flexibility to scale support as needed. Hybrid models can provide benefits of both approaches for firms in the middle or those with specific needs requiring both daily presence and specialized expertise. The most important factors in your decision: 1. Your firm's size and complexity 2. Your budget for compliance 3. The quality of talent you can attract/afford 4. Your need for daily versus on-demand support 5. Your growth trajectory and need for flexibility What Matters Most: Effectiveness, Not Structure Ultimately, regulators don't care whether your compliance function is in-house or outsourced, they care whether it's effective. A well-executed outsourced compliance program will outperform a weak in-house program every time, and vice versa. Focus on these success factors regardless of structure: - Competent, qualified compliance professionals with municipal securities expertise - Robust written supervisory procedures tailored to your business - Regular testing and surveillance of compliance obligations - Comprehensive training programs for all personnel - Proactive communication between compliance and business teams - Documentation of compliance decisions and processes - Continuous improvement based on testing results and regulatory developments Whether you build an in-house team, or partner with experienced consultants, commit to doing compliance right. Your clients, your regulators, and your firm's reputation depend on it.