by Koh Teng Teng

Share

Share

CMS licensee compliance in Singapore is a critical priority for firms operating in the country’s highly regulated financial sector. With the Monetary Authority of Singapore (MAS) maintaining a stringent, outcomes-focused approach to supervision, understanding the applicable MAS guidelines is essential to preserving operational integrity, meeting regulatory expectations, and maintaining market confidence. A clear grasp of MAS licence requirements enables management teams to align internal processes, strengthen controls, and respond effectively to evolving obligations.

This guide is written for Capital Markets Services (CMS) licence holders, Licensed Fund Management Companies (LFMCs), corporate finance advisers, dealers and advisory firms who need more than a summary of the rules. It sets out what MAS actually expects to see in practice: the capital you must hold, the people who must be fit and proper, the filings you must make and when, the controls that hold up under inspection, and the gaps that most often turn into enforcement action.

Key Takeaways

  • Scope discipline comes first: Your permitted regulated activities, licence conditions and customer types define the outer edge of what your firm may lawfully do. Most breaches start with scope creep, not bad intent.
  • Capital is a daily obligation, not an annual one: Base capital and financial resources must be maintained at all times, monitored continuously, and escalated to MAS the moment early-warning thresholds are approached.
  • Evidence beats intention: MAS assesses the operating effectiveness of controls. An unsigned policy, an untested procedure or a monitoring plan with no working papers is treated as a gap.
  • Filing integrity is a supervisory signal: Late or inaccurate submissions through MASNET / MAS-Tx and corporate e-lodgement channels attract scrutiny well beyond the filing itself.
  • Outsourcing is allowed; accountability is not transferable: An outsourced compliance officer gives you senior regulatory expertise without internal overhead — but the board and CEO remain answerable to MAS.
  • Fit and proper is continuous: Directors, the CEO, shareholders and representatives must satisfy MAS’s criteria on an ongoing basis, not only at the point of licensing.

What This Guide Covers

  1. What is a CMS licence, and does your firm need one?
  2. What are the main fund management licence types in Singapore?
  3. What are your core responsibilities under the Securities and Futures Act?
  4. How much capital must a CMS licensee hold?
  5. Who must be fit and proper, and what does MAS check?
  6. What ongoing MAS filings and deadlines apply?
  7. How do you build a compliance framework that survives inspection?
  8. What does MAS expect on AML/CFT?
  9. How should client assets be segregated and safeguarded?
  10. How do you manage conflicts, personal trading and best execution?
  11. What technology, cyber and resilience obligations apply?
  12. What are MAS’s expectations on outsourcing and delegation?
  13. What do recent MAS enforcement actions tell us?
  14. How do you prepare for a MAS inspection?
  15. When should you appoint an outsourced compliance officer?
  16. What does a first-year compliance roadmap look like?
  17. Frequently asked questions

What Is a CMS Licence, and Does Your Firm Need One?

A Capital Markets Services (CMS) licence is the authorisation issued by MAS under the Securities and Futures Act 2001 (SFA) that allows a corporation to carry on one or more regulated activities in or from Singapore. The SFA is supported by a dense layer of subsidiary legislation — principally the Securities and Futures (Licensing and Conduct of Business) Regulations and the Securities and Futures (Financial and Margin Requirements for Holders of Capital Markets Services Licences) Regulations — together with MAS notices, guidelines and circulars that carry real supervisory weight even where they are not law in the strict sense.

Maintaining a compliant posture transcends mere checkbox compliance; it is a cornerstone of market trust and institutional durability. Firms that treat MAS regulations as an operating discipline rather than an annual exercise consistently spend less time and money on remediation.

Which Regulated Activities Require a CMS Licence?

The regulated activities are set out in the Second Schedule to the SFA. Your licence names the specific activities you may conduct — and nothing else. The most common categories are summarised below.

Regulated activityWho typically holds it
Dealing in capital markets productsBrokers, proprietary trading firms, OTC derivatives and leveraged FX dealers, distributors of units in collective investment schemes
Fund managementHedge funds, private equity and venture capital managers, multi-family offices, discretionary portfolio managers
Advising on corporate financeM&A and capital raising advisers, IPO sponsors, boutique investment banks
Real estate investment trust managementREIT managers
Product financingFirms financing the acquisition or holding of capital markets products
Providing custodial servicesCustodians and safekeeping providers for capital markets products
Providing credit rating servicesCredit rating agencies

The practical test for management: if a revenue line, a new product, a new client segment or a new mandate structure does not map cleanly onto a regulated activity already on your licence, treat it as a licensing question before it becomes a business decision. Scope creep — an adviser drifting into discretionary management, a fund manager taking on distribution, a firm onboarding retail money on an accredited-investor-only licence — is one of the most common causes of regulatory trouble.

Do You Need a Financial Advisers Act Licence As Well?

Many firms need to consider both regimes. The SFA governs regulated activities such as dealing and fund management; the Financial Advisers Act 2001 (FAA) governs financial advisory services such as advising on investment products, issuing research analyses and arranging life policies. A CMS licensee may be able to rely on an exemption where advisory activity is genuinely incidental to its licensed regulated activity, but the scope of that exemption is narrower than firms often assume. Where your client-facing activity includes product recommendations to individuals, the FAA position should be confirmed in writing before launch.

What Exemptions Exist, and Why Are They Narrower Than Firms Assume?

Singapore recognises limited exemptions — for example, the single family office arrangement (which relies on the exemption for managing funds for related corporations rather than on a licence), and various exemptions for foreign entities dealing with specified counterparties. These are commonly over-relied upon. Three cautions:

  • Exemptions are activity-specific, not entity-specific. One exempt activity does not shelter adjacent activity conducted by the same entity.
  • Family relationships change. A single family office that begins managing assets for unrelated parties, or for structures no longer within the family tree, may fall outside the exemption.
  • Exempt does not mean unregulated. Exempt entities may still face AML/CFT, reporting and conduct expectations, and MAS has progressively tightened notification requirements for family office arrangements.

Yet to apply for a CMS licence? Read our step-by-step guide on getting started with MAS licence application in Singapore for A/I LFMCs.

What Are the Main Fund Management Licence Types in Singapore?

For fund managers, the licence type you hold determines your capital floor, staffing minimums, permitted investor base and the intensity of MAS supervision. Getting this choice wrong at application stage is expensive to unwind later.

What Changed When the Registered Fund Management Company Regime Was Phased Out?

The Registered Fund Management Company (RFMC) regime — the lighter-touch category capped by assets under management and number of qualified investors — was phased out, with affected firms transitioned into the Accredited/Institutional Investor LFMC (A/I LFMC) category. The practical consequence for newer managers is that there is no longer a “starter” registration tier: a Singapore fund management business generally begins life as a licensed entity, with the full set of licensee obligations from day one. Firms that transitioned across should confirm that their compliance framework, capital monitoring and filing calendar were genuinely upgraded to LFMC standard rather than simply relabelled.

A/I LFMC or Retail LFMC — Which Applies to You?

FeatureA/I LFMCRetail LFMC
Permitted investorsAccredited and institutional investors onlyAll investors, including retail
Indicative base capitalS$250,000S$500,000 and above, depending on activity and scheme type
Minimum relevant professionals in SingaporeAt least 2 full-time professionalsAt least 3 full-time professionals
Independent compliance functionExpected; may be outsourced or performed by a suitably senior officerExpected to be independent and dedicated, scaled to the business
Supervisory intensityRisk-proportionateHigher — retail investor protection, prospectus and product governance obligations

Figures are indicative and intended as orientation only. Confirm the applicable base capital, staffing and experience requirements against the current MAS Guidelines on Licensing, Registration and Conduct of Business for Fund Management Companies and the applicable financial and margin requirements regulations.

How Do VCCs, Fund Structures and Tax Incentives Interact With Your Licence?

If you manage a Variable Capital Company (VCC), the manager must be a permissible fund manager — in practice, a licensed or otherwise eligible fund management entity. Separately, funds seeking Singapore fund tax incentives (commonly referred to by the section 13O and 13U schemes) must meet economic substance conditions covering minimum assets under management, local business spending and investment professional headcount. These are administered separately from your CMS licence, but they interact with it: the same professionals often count toward both, and a change in one can quietly breach the other. Treat licence conditions, fund documentation and incentive conditions as a single control set with one owner.

What Are Your Core Responsibilities Under the Securities and Futures Act?

The SFA and its subsidiary legislation prescribe specific duties that every licensee must embed into daily operations. Rather than reciting the statute, it is more useful to group obligations into the four areas MAS supervises in practice.

  • Licensing and scope: conducting only permitted regulated activities, adhering to licence conditions, obtaining prior MAS approval or notification for changes in key personnel, shareholders and business scope, and maintaining an accurate register of appointed representatives.
  • Conduct of business: customer classification, risk disclosure, fair dealing, suitability where applicable, marketing and advertising standards, complaints handling, order execution, and prohibitions on misleading statements.
  • Prudential and safeguarding: base capital and financial resources, client money and asset segregation, reconciliation, custody arrangements and risk management systems.
  • Market conduct and integrity: the market misconduct provisions of the SFA covering insider trading, false trading, market rigging, manipulation and the dissemination of false or misleading information — supported by surveillance, personal trading controls and escalation procedures.

Underpinning all four is the record-keeping obligation. Books, records, client documentation and evidence of controls must be retained for the prescribed retention period (generally five years for most categories) and be capable of being produced to MAS promptly and in an intelligible form. Where records sit with an administrator, custodian or overseas affiliate, your firm — not the vendor — is responsible for retrieval.

Navigating CMS Licensee Obligations or MAS Audits?

Don’t let regulatory friction impact your fund or advisory operations. Partner with Alder Compliance for specialised compliance oversight, policy reviews, and MAS filing support.

Book a Consultation with an Alder Expert

How Much Capital Must a CMS Licensee Hold, and How Is It Monitored?

Capital adequacy is where good firms most often trip, because the obligation is continuous while the measurement habit is often quarterly. Three concepts matter.

What Is the Difference Between Base Capital and Financial Resources?

  • Base capital is broadly paid-up ordinary share capital and certain reserves, less specified deductions. It is a floor that must be met at all times — not an opening balance. Accumulated losses erode it.
  • Financial resources are calculated by adjusting net assets for illiquid or non-qualifying items. Fixed assets, prepayments, related-party receivables and unsecured amounts owing from directors commonly fall away in this calculation, which is why a healthy balance sheet can still produce a thin financial resources figure.
  • Total risk requirement aggregates the risk charges applicable to your business — for most fund managers the operational risk requirement (calculated by reference to annual gross income) is the dominant component.

What Are the Early-Warning Triggers You Must Watch?

Financial resources must exceed the total risk requirement at all times, and firms are required to notify MAS where resources fall below a specified early-warning multiple of that requirement. In practice this means a monthly — not quarterly — capital computation, with a documented escalation path when the buffer narrows. Sound operating practice for an LFMC includes:

  • A standing monthly capital adequacy computation reviewed by the CEO or finance lead, with the working papers retained.
  • An internal buffer set above the regulatory early-warning threshold, so that management acts before the notification obligation bites.
  • Forward-looking stress testing for redemption shocks, delayed management fees, deferred performance fees and one-off legal or remediation costs.
  • A shareholder funding letter or documented capital injection mechanism agreed in advance, so a breach can be cured in days rather than weeks.
  • Professional indemnity insurance sized to the nature, scale and complexity of the business, reviewed annually at renewal.

Why it matters: a capital shortfall is rarely treated as an isolated accounting event. MAS reads it as a governance signal — evidence that management was not monitoring the firm’s most basic prudential obligation.

Who Must Be Fit and Proper, and What Does MAS Actually Check?

Professional accountability begins with leadership. MAS guidelines require directors, the CEO, executive officers, substantial shareholders and appointed representatives to meet strict fit and proper criteria on a continuing basis. The assessment covers honesty, integrity and reputation; competence and capability; and financial soundness.

What Staffing and Experience Standards Apply?

  • Directors: a minimum of two, with at least one resident in Singapore, each with relevant experience in the financial services industry.
  • CEO: resident in Singapore, with substantial relevant experience — MAS sets a materially higher experience expectation for retail-facing managers than for A/I managers.
  • Relevant professionals: full-time, Singapore-based, and genuinely dedicated to the licensed business. Nominee or part-time arrangements designed only to meet a headcount number attract scrutiny.
  • Representatives: appointed through the representative notification framework, satisfying the applicable entry requirements and examination modules for the regulated activity concerned.

How Do You Keep Fit and Proper Status Current?

Fit and proper is an ongoing test, so build a standing annual process rather than relying on onboarding checks:

  • Annual attestations from directors, executive officers and representatives covering bankruptcy, litigation, regulatory action, criminal proceedings and outside business interests.
  • Periodic adverse-media and sanctions screening of key persons and substantial shareholders, with results documented.
  • Prompt notification to MAS of changes in key appointments and of matters bearing on fitness and propriety, within the prescribed timelines.
  • Reporting of representative misconduct to MAS where the applicable notice is triggered, with an internal disciplinary record to match.
  • A continuing professional development (CPD) log per representative, tracking the required annual training hours including the mandated ethics and rules-and-regulations components. Confirm the current hour allocations under the CPD notice applicable to your licence type.

How Do the Individual Accountability and Conduct Guidelines Apply to You?

MAS’s Guidelines on Individual Accountability and Conduct set expectations for identifying senior managers, clarifying their responsibilities in writing, and reinforcing standards of conduct across the workforce. Larger firms are expected to implement the full set of accountability outcomes; smaller licensees are still expected to achieve the underlying outcomes proportionately. A one-page responsibility map naming who owns capital, AML, trading, valuation, technology and regulatory reporting is one of the highest-value documents a small licensee can produce — and one inspectors frequently ask for.

What Ongoing MAS Filings and Reporting Deadlines Apply?

Timely and accurate reporting is a fundamental requirement for all licensed entities. Financial returns and regulatory submissions are processed through MASNET, the MAS-Tx portal or the relevant corporate e-lodgement channel. Maintaining MAS filings requires a disciplined approach to record-keeping and data validation.

ObligationFrequencyOwner & internal practice
Periodic regulatory / financial returnsQuarterly (as applicable to licence type)Finance prepares, compliance reviews, CEO signs off before submission
Audited financial statements and auditor’s report to MASAnnual, within the prescribed period after financial year endStart the audit timetable at least four months before the deadline; late filing requires an extension request
Capital adequacy computationMonthly (internal), reported as requiredImmediate notification to MAS on breach or early-warning trigger
Changes in particulars, key appointments, shareholding or business scopeEvent-driven — approval or notification within prescribed timelinesCheck whether prior approval is required before the change takes effect, not after
Appointment, change and cessation of representativesEvent-drivenNever allow client-facing activity before the notification is effective
Reporting of representative misconductEvent-driven, short deadline from discoveryMaintain an internal incident log with discovery dates to evidence timeliness
Technology / cyber incident notificationEvent-driven, very short deadline from discovery, with follow-up root cause analysisPre-draft the notification template; the clock runs faster than an internal investigation
AML/CFT and other thematic surveys or data requestsPeriodic / ad hocAssign a named owner and retain the submitted data set and supporting extract

Frequencies and deadlines vary by licence type and regulated activity. Build your calendar from the notices and regulations that apply to your firm, and confirm each due date before relying on it.

Four habits separate firms that file cleanly from those that do not:

  • Establish an annual calendar for every recurring regulatory deadline and financial return, with reminders set two weeks ahead of each due date and a named backup owner.
  • Conduct an internal review of regulatory data before portal submission — reconciling returns to the general ledger and to the prior period.
  • Ensure that all staff involved in reporting are trained on current MAS notices and circulars, and that MASNET / MAS-Tx access is maintained for at least two people.
  • Maintain an immutable audit trail — submission confirmations, the exact file submitted, and the approval record — for every document filed with the authorities.

How Do You Build a Compliance Framework That Survives Inspection?

Creating a resilient compliance framework is essential to the long-term success of financial institutions in Singapore. A structured approach supports compliance with regulatory obligations and fosters a culture of integrity and accountability. Using a comprehensive MAS compliance checklist helps organisations identify gaps and strengthen their control environment systematically — with reference to the MAS Compliance Toolkit for Licensed Fund Management Companies, which is the closest thing to a published self-assessment template for LFMCs.

What Should Your Compliance Manual Actually Contain?

A generic manual bought off the shelf is worse than no manual, because it creates documented obligations your firm does not follow. A workable manual for a Singapore licensee is tailored to your regulated activities and covers, at minimum:

  • Governance structure, committee terms of reference and a responsibility map
  • Licensing scope, permitted activities and licence conditions
  • Client onboarding, classification (accredited / institutional / retail) and opt-in or opt-out procedures
  • AML/CFT and sanctions policy, with a separate procedures document
  • Investment process, mandate adherence, breach identification and rectification
  • Order handling, best execution, trade allocation, cross trades and error correction
  • Valuation and pricing policy, including hard-to-value assets
  • Conflicts of interest, personal account dealing, gifts and entertainment, and outside business interests
  • Marketing material review and record of approvals
  • Complaints handling and the associated register
  • Outsourcing, technology risk, cyber hygiene and business continuity
  • Record keeping, regulatory reporting, training and the annual compliance monitoring programme

How Do You Conduct Risk Assessments That MAS Will Accept?

Effective risk management begins with a clear, documented understanding of the risks facing the business. A defensible assessment does four things: it identifies inherent risks by business line and client type; it maps each risk to specific controls; it rates residual risk with a stated rationale; and it produces dated actions with owners. Refresh it annually and whenever the business changes materially — a new strategy, a new jurisdiction, a new distribution channel, a new asset class.

What Does a Compliance Monitoring Programme Look Like in Practice?

This is the single biggest differentiator at inspection. A monitoring programme is a schedule of tests, executed with sampling, documented in working papers, and reported to the board. A simple annual cycle might look like this:

Review areaFrequencyEvidence to retain
Client file and CDD sample testingQuarterlySample list, test sheet, exceptions and remediation dates
Mandate and investment restriction adherenceMonthly / quarterlyBreach log with cause, impact, client notification and fix
Best execution and trade allocation reviewQuarterlyExecution sample, broker review minutes, allocation exceptions
Personal account dealing pre-clearanceQuarterlyApprovals, statements received, restricted list checks
Client money and asset reconciliation reviewMonthlyReconciliations, ageing of breaks, sign-off
Marketing and client communications reviewOngoing / quarterlyApproval register with versions and dates
Independent compliance review or health checkAnnualReport, management response, tracked remediation plan

What Should Compliance Report to the Board?

A quarterly compliance report that runs to two pages and contains no exceptions is a red flag, not a clean bill of health. A credible report covers: monitoring completed in the period with findings; open breaches and incidents with ageing; regulatory developments and their impact on the firm; training delivered; complaints; capital position; filings made and any late submissions; and the status of prior remediation items. Minute the board’s discussion, not just the receipt of the paper.

What Does MAS Expect From CMS Licensees on AML/CFT?

Anti-money laundering and countering the financing of terrorism obligations for capital markets intermediaries are set out in the applicable MAS notice and accompanying guidelines, and they have been an enforcement priority in recent years. Singapore’s high-profile money laundering investigations sharpened supervisory focus on source of wealth verification, complex ownership structures and the quality of ongoing monitoring across the financial sector — including fund managers and advisory firms that had historically considered themselves lower risk.

What Are the Building Blocks of a Compliant AML/CFT Programme?

  • Enterprise-wide risk assessment: documented, updated at least annually, covering customer, product, delivery channel, country and technology risk — and actually driving your risk ratings.
  • Customer due diligence: identification and verification of the customer, beneficial owners (including through layered structures), and persons appointed to act on the customer’s behalf; purpose and intended nature of the relationship.
  • Screening: name screening against sanctions, terrorism and adverse media sources at onboarding and on an ongoing basis, with documented disposition of hits.
  • Enhanced due diligence: for politically exposed persons, higher-risk jurisdictions and complex or opaque structures — including corroborated source of wealth and source of funds, not merely a client declaration.
  • Ongoing monitoring: transaction and relationship monitoring calibrated to the risk profile, with periodic review cycles by risk rating and trigger-based reviews.
  • Suspicious transaction reporting: internal escalation to the AML/CFT compliance officer, prompt filing with the Suspicious Transaction Reporting Office where suspicion arises, and strict observance of tipping-off restrictions.
  • Governance: an appointed AML/CFT compliance officer with sufficient seniority and independence, board oversight, and an independent audit or review of the AML programme.
  • Training and records: role-relevant AML training at onboarding and annually, with attendance records; retention of CDD and transaction records for the prescribed period after the relationship ends.

Where Do Fund Managers Most Often Fall Short?

Recurring findings include: treating institutional or intermediated investors as automatically low risk without documenting the rationale; screening at onboarding only; accepting source of wealth statements without corroborating evidence; failing to look through nominee, trust and multi-layer holding structures to the ultimate beneficial owner; periodic reviews that are overdue but untracked; and an AML policy that describes controls the firm never implemented. Every one of these is inexpensive to fix in advance and expensive to explain afterwards.

How Should Client Assets Be Segregated and Safeguarded?

Protecting client assets is a fiduciary duty that demands meticulous attention, and the rules on client money and custody are among the most prescriptive in the regime. Effective risk management here prevents fund commingling and gives investors a genuine layer of protection.

  • Segregation: client money and assets must be held separately from the firm’s proprietary assets, in appropriately designated trust or custody accounts with eligible institutions, with written acknowledgement of the account’s trust status.
  • Custodian selection and oversight: documented due diligence on the custodian at appointment, and periodic re-assessment — not a one-time decision made at launch.
  • Reconciliation: regular reconciliation of client money and asset positions to custodian records, with breaks investigated, aged and escalated rather than carried forward.
  • Withdrawal controls: dual authorisation for movements of client money, and standing instructions reviewed periodically — a common fraud vector.
  • Disclosure: clear written disclosure to customers on how their assets are held, the risks involved, and the treatment of assets held with overseas custodians or sub-custodians.
  • Independent valuation: a valuation policy with an independent check on pricing, particularly for illiquid or level-three assets where the manager’s fee depends on the valuation.

How Do You Manage Conflicts of Interest, Personal Trading and Best Execution?

Effective management of conflicts of interest is vital for maintaining market integrity. Firms must establish systems to identify, disclose and mitigate potential conflicts — and be able to show the system operated. Transparency protects both the firm and its clients.

Which Conflicts Should You Be Documenting?

  • Side-by-side management of funds and accounts with differing fee structures, and the allocation policy that governs them
  • Cross trades between managed accounts or funds, including pricing basis and approval
  • Related-party transactions, affiliate brokerage and in-house product recommendations
  • Inducements, rebates, trailer fees and soft dollar arrangements, which must satisfy the applicable conditions and be disclosed
  • Directorships, advisory roles and outside business interests held by staff
  • Gifts and entertainment given or received, above defined thresholds

Maintain a conflicts register with the identified conflict, the mitigation applied, the disclosure made and the date. Review it at least annually and at each new mandate or product launch.

What Should a Personal Account Dealing Policy Cover?

At minimum: pre-clearance of trades, a restricted or watch list, minimum holding periods where appropriate, blackout periods around client activity, duplicate statements or broker feeds, and periodic review against the firm’s own trading. The control fails most often not because the policy is weak, but because nobody reviews the submissions.

How Do You Evidence Best Execution?

MAS expects capital markets intermediaries to have an order execution policy that addresses the factors considered in obtaining the best available terms, the venues and brokers used, and how execution quality is monitored. Evidence means a periodic broker review with minutes, sample testing of executions against relevant benchmarks, and a documented process for adding or removing counterparties — not a policy statement alone.

What Technology, Cyber and Operational Resilience Obligations Apply?

Technology risk is no longer a back-office matter for licensees of any size. MAS has issued baseline cyber hygiene requirements applicable to financial institutions, alongside technology risk management and business continuity guidelines. For a small or mid-sized licensee, the practical expectations include:

  • Administrative account controls and the principle of least privilege, with periodic user access reviews
  • Multi-factor authentication for remote and administrative access to critical systems
  • Timely security patching, malware protection and a documented asset inventory
  • Network perimeter controls and secure configuration standards
  • An incident response plan with defined notification timelines to MAS — the reporting window for material incidents is short, so the template and escalation tree must exist before the incident
  • A business continuity plan tested at least annually, with dependency mapping for critical service providers, and recovery objectives that reflect real business needs
  • Personal data protection obligations under the PDPA, including a data breach assessment and notification process that runs in parallel with any MAS notification

Firms operating environmental, social and governance strategies should additionally note MAS’s environmental risk management expectations for asset managers, covering governance, research and portfolio construction, risk management and disclosure. Where you market a fund on sustainability characteristics, the disclosure and substantiation expectations run alongside your normal marketing review.

What Are MAS’s Expectations on Outsourcing and Delegation?

Most licensees outsource something: fund administration, IT, custody support, internal audit, or compliance itself. MAS’s outsourcing guidelines are clear that the firm retains full responsibility for outsourced functions. A defensible arrangement includes:

  • A register of outsourcing arrangements, distinguishing material from non-material, kept current and producible on request.
  • Pre-appointment due diligence on capability, financial standing, key-person dependency, sub-contracting and jurisdiction risk.
  • Written agreements covering service levels, confidentiality, data location, audit and inspection rights for the firm and for MAS, incident notification, and exit and transition provisions.
  • Ongoing monitoring — service reviews, assurance reports where available, and an annual reassessment of materiality.
  • Exit planning for material arrangements, so that a provider failure does not become a regulatory breach.

Where investment management is delegated to an overseas affiliate, expect closer questions about who is genuinely making investment decisions, whether the Singapore entity has real substance, and how the Singapore firm supervises the delegate.

What Do Recent MAS Enforcement Actions Tell Us?

In Singapore, the essence of regulatory compliance is not just in policy documentation, but in its daily practical application. As seen in recent analysis of MAS enforcement actions and key lessons for fund managers, regulatory scrutiny often focuses on operational gaps rather than paper compliance.

The themes that recur across supervisory findings and enforcement outcomes are consistent and, for the most part, avoidable:

  • AML/CFT control failures — inadequate CDD, unverified source of wealth, weak ongoing monitoring
  • Carrying on regulated activity outside the scope of the licence, or allowing unappointed individuals to perform representative functions
  • Inaccurate or late regulatory filings and failure to notify MAS of material changes
  • Capital and financial resources breaches identified late, or not escalated
  • Client asset handling failures, including commingling and unreconciled positions
  • Misleading marketing, unsubstantiated performance claims and inadequate risk disclosure
  • Governance failures — a compliance function without independence, seniority or resources, and boards that received no meaningful compliance reporting

The consequences range from supervisory reminders and letters of concern through to composition penalties, licence conditions, reprimands and prohibition orders against individuals. A prohibition order is career-ending in financial services, which is why individual accountability is now a board-level topic rather than a compliance one.

How Do You Prepare for a MAS Inspection or Thematic Review?

MAS inspections typically begin with a notification and a detailed information request, followed by document review, onsite or virtual interviews with key persons, and a findings letter requiring a management response and remediation plan. Preparation is not something you begin when the letter arrives.

What Should You Have Ready at All Times?

  • Current compliance manual and AML procedures, with version history and approval dates
  • Board and committee minutes for the last two to three years
  • Compliance monitoring working papers and reports
  • Risk assessments — enterprise-wide AML and operational
  • Registers: conflicts, gifts, complaints, breaches, incidents, outsourcing, personal trading
  • Capital computations and regulatory returns for the review period
  • A sample of complete client files across risk ratings
  • Training records and CPD logs by individual
  • Organisation chart, responsibility map and a current list of representatives

How Should You Handle the Inspection Itself?

Appoint a single coordinator to control all submissions so that nothing inconsistent leaves the building. Answer what is asked, accurately and completely, and correct anything you later discover to be wrong — promptly and in writing. Where you know a gap exists, it is almost always better to present it with a remediation plan already underway than to have it found. And when the findings letter arrives, respond with dated, owned actions rather than assurances; MAS follows up on remediation, and a missed commitment compounds the original finding.

A mock inspection or independent compliance health check conducted twelve months before you expect supervisory contact is the most cost-effective preparation available to a small or mid-sized licensee.

When Should You Appoint an Outsourced Compliance Officer?

Outsourced compliance services offer a strategic advantage by providing specialised expertise without the cost of expanding internal headcount. External partners bring experience across many firms and supervisory cycles, allowing leadership to focus on investment strategy while oversight remains independent and robust.

What Are the Signals That You Need External Support?

  • Compliance sits with the CEO, COO or finance lead alongside a full-time commercial role
  • Your manual has not been reviewed since licensing, or does not reflect what the firm actually does
  • Monitoring is discussed but no working papers exist
  • You are launching a new strategy, fund, jurisdiction or client segment
  • You have received a MAS query, inspection notification or thematic survey
  • Your compliance officer has resigned and client-facing activity continues
  • You are scaling headcount or AUM faster than your control environment

In-House or Outsourced — How Do They Compare?

ConsiderationIn-house compliance officerOutsourced compliance officer
Cost profileFixed salary, benefits, training, cover during leavePredictable fee scaled to scope; no recruitment or attrition cost
Breadth of experienceDeep firm knowledge; exposure limited to one businessCross-firm benchmarking and current supervisory insight
IndependenceCan be pressured by commercial reporting linesStructurally independent of revenue generation
ContinuityKey-person risk on resignationTeam-based cover and documented handover
Accountability to MASRetained by the board and CEORetained by the board and CEO — unchanged

Whichever model you choose, MAS will expect the compliance function to have appropriate seniority, direct access to the board, sufficient information and resources, and freedom from conflict. If you outsource, define the scope precisely in writing, agree reporting lines and escalation, and ensure the provider has real access to systems, records and people. Outsourcing the work never outsources the responsibility.

What Does a Practical Compliance Roadmap Look Like?

First 90 Days After Licensing

  • Tailor and adopt the compliance manual and AML procedures; obtain board approval on the record
  • Complete the enterprise-wide risk assessment and set risk ratings for clients and products
  • Build the regulatory filing calendar and confirm MASNET / MAS-Tx access for two named users
  • Stand up the registers: conflicts, gifts, complaints, breaches, outsourcing, personal trading
  • Run first-round training for all staff and document attendance
  • Confirm the capital computation process and produce the first monthly computation

Months 4 to 12

  • Execute the compliance monitoring programme and retain working papers
  • Deliver quarterly compliance reporting to the board with findings and remediation status
  • Complete annual fit and proper attestations and CPD tracking
  • Test business continuity and review technology and cyber controls
  • Complete the audit and file the annual return within the prescribed deadline
  • Commission an independent compliance review ahead of any expected supervisory contact

How Can Alder Compliance Support Your Firm?

Navigating the regulatory landscape in Singapore demands more than a basic understanding of the rules. Financial institutions require a strategic partner to transform complex obligations into a sustainable operational advantage.

Alder Compliance delivers bespoke compliance solutions for capital market entities, LFMCs, advisory firms and payment institutions — from CMS licence applications and framework build-out, through ongoing outsourced compliance officer support, policy and manual reviews, AML/CFT programme design, independent compliance health checks and MAS inspection readiness, to hands-on management of statutory filings.

Reach out to our expert team today to discuss how we can strengthen your internal controls and support your ongoing MAS filings with precision.

Frequently Asked Questions (FAQ)

What are the primary CMS licensee responsibilities under current MAS guidelines?

Entities holding a Capital Markets Services (CMS) licence must adhere to the Securities and Futures Act and its subsidiary legislation. Core responsibilities include operating only within the scope of the licensed regulated activities, maintaining base capital and financial resources at all times, establishing risk management and compliance frameworks, segregating client assets, meeting AML/CFT obligations, keeping prescribed records, and making accurate and timely MASNET / MAS-Tx filings.

How can a firm ensure it remains fully compliant with MAS regulations?

Implement a structured compliance programme: a tailored compliance manual, an annual risk assessment, a documented compliance monitoring programme with working papers, a regulatory filing calendar with named owners, ongoing staff training and CPD tracking, and quarterly compliance reporting to the board. Engaging an outsourced compliance officer adds independent oversight and helps ensure filings and regulatory developments are tracked without expanding headcount.

What role does the Securities and Futures Act play in CMS compliance?

The Securities and Futures Act 2001 is the primary legislative framework governing capital markets in Singapore. It sets out which activities are regulated, the licensing requirements for conducting them, business conduct and disclosure standards, and the market misconduct prohibitions — including insider trading and market manipulation — enforced by MAS. It is supported by regulations, notices and guidelines that carry the operational detail.

What is the difference between an A/I LFMC and a retail LFMC?

An A/I LFMC may serve only accredited and institutional investors, while a retail LFMC may serve all investors including retail clients. The retail category carries higher base capital, higher minimum staffing, additional product governance and disclosure obligations, and closer supervisory attention. The Registered Fund Management Company regime has been phased out, so new fund managers generally apply for a licence rather than a lighter registration.

What base capital does a fund management company need in Singapore?

Base capital requirements depend on the licence type and regulated activities — indicatively S$250,000 for an A/I LFMC and higher thresholds for retail fund managers. Base capital is only part of the picture: firms must also maintain financial resources in excess of their total risk requirement at all times and notify MAS if early-warning thresholds are triggered. Confirm the current figures applicable to your regulated activities before relying on them.

What are the essential MAS fit and proper requirements for staff?

MAS requires directors, CEOs, executive officers, substantial shareholders and appointed representatives to satisfy fit and proper criteria on a continuing basis. The assessment covers honesty, integrity and reputation; competence and capability, including relevant experience and applicable examinations; and financial soundness. Firms should run annual attestations, periodic screening and CPD tracking to evidence ongoing compliance.

How should CMS licensees manage client assets to satisfy MAS?

CMS licensees must keep client money and assets strictly segregated from proprietary funds, using designated trust or custody accounts with eligible financial institutions. Supporting controls include documented custodian due diligence, regular reconciliation with investigation and ageing of breaks, dual authorisation over withdrawals, clear written disclosure to customers, and an independent valuation process for hard-to-price assets.

What AML/CFT obligations apply to fund managers and capital markets intermediaries?

Firms must conduct an enterprise-wide money laundering and terrorism financing risk assessment, perform customer due diligence including beneficial ownership identification, screen against sanctions and adverse media on an ongoing basis, apply enhanced due diligence to politically exposed persons and higher-risk relationships, monitor transactions and relationships, file suspicious transaction reports with the Suspicious Transaction Reporting Office, appoint an AML/CFT compliance officer, train staff, and retain records for the prescribed period.

Why should an LFMC consider outsourced compliance services?

Outsourced compliance gives Licensed Fund Management Companies access to senior regulatory expertise at a predictable cost, without recruitment risk or key-person dependency. It provides independent oversight of the compliance framework, objective risk assessment, cross-firm benchmarking, and disciplined management of regulatory filings — particularly valuable for firms whose compliance responsibilities currently sit with a commercially conflicted executive.

Can a CMS licensee outsource its compliance function entirely?

Outsourcing the compliance function is accepted practice for smaller licensees, provided the arrangement meets MAS’s outsourcing expectations: documented due diligence, a written agreement covering access and audit rights, defined scope and escalation, and ongoing oversight. The board and CEO remain accountable to MAS for compliance outcomes regardless of who performs the work, so oversight of the provider must be evidenced.

What happens during a MAS inspection, and how should a firm prepare?

A MAS inspection usually begins with notification and a detailed document request, followed by review of policies, registers, client files and working papers, interviews with key persons, and a findings letter requiring a management response and remediation plan. Preparation means keeping inspection-ready records year-round, appointing a single submission coordinator, and ideally commissioning an independent compliance health check or mock inspection in advance.

What are the consequences of non-compliance with MAS requirements?

Depending on severity, outcomes range from supervisory reminders and letters of concern to composition penalties, additional licence conditions, public reprimands, restrictions on business, prohibition orders against individuals, licence revocation and, for serious misconduct, criminal prosecution. Reputational consequences with investors and counterparties frequently outweigh the direct financial penalty.

How does Alder Compliance assist with MAS filings and regulatory support?

Alder Compliance provides hands-on advisory and operational compliance support. We assist with CMS licence applications, build and tailor compliance and AML frameworks, act as outsourced compliance officer, conduct periodic compliance health checks and mock inspections, review internal policies and marketing materials, and manage statutory filings so your firm stays aligned with MAS expectations.

Disclaimer: This guide is provided for general information and does not constitute legal or regulatory advice. Regulatory requirements, thresholds and deadlines change. Firms should verify the current position against the applicable MAS legislation, notices and guidelines, or seek professional advice tailored to their circumstances.

About the Author: Koh Teng Teng

Teng Teng is the Compliance Director at Alder. She holds a Bachelor of Arts from the National University of Singapore and is an Associate of The Chartered Governance Institute (CGI) and the Chartered Secretaries Institute of Singapore (CSIS). With over 7 years of experience in compliance and regulatory advisory, she leads Alder’s outsourced compliance service delivery, helping clients strengthen governance and meet Singapore regulatory requirements.