Independent Singapore VCC guidance
Direct answer
Investigate the alert in a controlled case file. Preserve the rule version, input data, orders, executions, allocations, communications and portfolio context before records change. Validate that the alert was generated from complete and correctly mapped data, then test plausible explanations against independent evidence. Record the investigator’s reasoning, conflict check, escalation and approval. Close only when the conduct question and any data or control failure have separate, evidenced outcomes.
At a glance
- Preserve the alert inputs and rule configuration before tuning or replaying it.
- Validate data completeness and mapping before drawing conduct conclusions.
- Test the trade against mandate, market, portfolio, related-account and communication context.
- Separate false-positive disposition from remediation of a weak rule or broken data feed.
Who this is for
- Fund manager compliance, dealing supervision, risk and operations teams investigating alerts linked to a VCC mandate
Important exclusions
- A legal conclusion on market misconduct or a substitute for escalation under applicable laws, notices, exchange rules or internal procedures
Freeze the case record
Open a unique case before changing a rule, order record or data mapping. Capture the alert text, detection time, rule and threshold version, instruments, accounts, VCC and sub-fund, relevant people, data source and initial severity. Preserve raw input extracts, order life cycle, executions, allocations, positions, market data and linked communications according to approved access and retention controls. Record who collected each item and when it entered the case.
Sources: Monetary Authority of Singapore · Singapore Statutes OnlineRestrict the case to people who need access and check investigator conflicts. Do not ask the subject to reconstruct evidence before original records are preserved. If there is a risk of continuing harm, apply proportionate interim controls through authorised channels while the facts are tested. An interim restriction is not a finding; label it clearly and set a review route.
Sources: Monetary Authority of Singapore · Accounting and Corporate Regulatory Authority- Preserve the original alert, rule configuration and source-data snapshot.
- Identify every account, sub-fund, strategy and person potentially connected to the event.
- Secure orders, executions, allocations, holdings, market data and relevant communications.
- Record collection provenance, access restrictions and any missing evidence.
- Apply and approve interim controls separately from the final case disposition.
Validate data lineage and rule logic
Reconstruct how source events became the alert. Confirm instrument identifiers, account and sub-fund mapping, timestamps, time zone, cancellations, amendments, fills, allocations, corporate actions and market reference data. Compare surveillance inputs with authoritative order and position records. A data defect can create or suppress an alert, so document completeness and transformations before relying on the signal.
Sources: Monetary Authority of Singapore · Monetary Authority of Singapore · Monetary Authority of SingaporeReperform the rule using the preserved version and test whether the same inputs produce the alert. Explain the scenario the rule is designed to identify, the expected false positives and known blind spots. Do not tune the threshold inside the active case to make the alert disappear. If the logic is weak, complete the present investigation using available evidence and open a separate controlled change with testing and approval.
Sources: Monetary Authority of Singapore · Singapore Statutes Online| Layer | Control question | Evidence |
|---|---|---|
| Order source | Are submissions, amendments and cancellations complete and sequenced? | Authoritative order log and source-system extract |
| Execution and allocation | Do fills and allocations map to the correct VCC account or sub-fund? | Broker record, allocation file and accounting record |
| Reference data | Were identifiers, prices, venues and time fields correct? | Versioned security master and market-data snapshot |
| Rule engine | Did the approved rule process the intended population and parameters? | Rule version, run log and controlled reperformance |
| Case output | Can each displayed alert field be traced to a source? | Field-level lineage and exception log |
Related guidance: evidence for VCC best execution
Test the investment and conduct context
Review the approved investment rationale, mandate, restrictions, position history, liquidity, corporate events and expected trading approach. Compare timing and size with market conditions and the portfolio need. Examine related VCC sub-funds, managed accounts and personal dealing where the procedure permits, because apparently isolated activity may form part of a wider pattern. The analysis should identify both supporting and contrary evidence.
Sources: Monetary Authority of Singapore · Singapore Statutes OnlineInterview only after the documentary chronology is stable. Ask open questions, preserve the explanation and test it against contemporaneous research, instructions, communications and system records. Distinguish an unusual but legitimate portfolio decision from conduct that lacks a credible investment basis or conflicts with order-handling controls. Avoid treating silence in one channel as proof that no instruction or conversation existed; identify the approved communication population and known gaps.
Sources: Monetary Authority of Singapore · Monetary Authority of Singapore- Compare the trade with approved strategy, restrictions, research and position objectives.
- Review timing, price, size, venue, liquidity and relevant market or issuer events.
- Check related funds, accounts, allocations and employee activity under approved procedures.
- Preserve and test explanations against contemporaneous evidence.
- Record evidence that supports and contradicts each plausible explanation.
Related guidance: VCC restricted-list operation
Decide, escalate and approve the disposition
Use defined outcomes such as explained activity, control exception, data failure, rule-design issue, conduct concern or unresolved. More than one outcome may apply. The case summary should state the question, facts, evidence gaps, analysis, alternative explanations, impact, conflicts, escalation and proposed actions. A senior or independent reviewer should challenge cases involving material risk, repeated patterns, senior staff or uncertain interpretation.
Sources: Monetary Authority of Singapore · Singapore Statutes OnlineFollow the applicable escalation and reporting procedures when the facts indicate a possible breach or misconduct concern. Do not delay required action merely to complete an ideal case file, and do not make a legal label from incomplete evidence. Record who decided the route, what information was available and what remains open. Keep external communications within authorised channels and preserve confidentiality.
Sources: Monetary Authority of Singapore · Singapore Statutes Online- Data or mapping failureCorrect the control through change governance, assess missed or distorted alerts and rerun the affected population.
- Legitimate activityClose the conduct question only when the explanation is supported by independent and contemporaneous evidence.
- Policy or control exceptionAssess impact, escalate under the breach process and track correction and prevention separately.
- Potential misconduct or unresolved riskApply the authorised escalation route, preserve evidence and obtain specialist or legal input where needed.
Related guidance: VCC investment mandate breach response
Remediate and quality-check closure
Separate case closure from remediation closure. The conduct question may be resolved while a data gap, weak rule, access failure or training issue remains. Assign each action an owner, risk-based priority, interim control, test evidence and reviewer. Assess whether the issue affects other instruments, sub-funds, strategies, people or historical periods. A narrowly corrected record can leave the surveillance population exposed.
Sources: Monetary Authority of Singapore · Singapore Statutes OnlineBefore closing, confirm that the chronology is reproducible, evidence references open, conclusions match facts, conflicts were managed, escalations completed and actions entered into the appropriate tracker. Sample closed cases for consistency and look for repeated false positives or common blind spots. Use themes to improve data quality, rule coverage, dealing controls and supervision without weakening detection simply to reduce alert volume.
Sources: Monetary Authority of Singapore · Monetary Authority of Singapore- ContainApply authorised interim controls and preserve records without prejudging the final conduct outcome.
- CorrectFix confirmed data, process or control failures through controlled ownership and testing.
- Look backAssess whether the same defect affected other alerts, accounts, sub-funds or historical activity.
- ValidateIndependently test the corrected control and confirm the case rationale remains supported.
- LearnReport themes and improve supervision while retaining an auditable record of changes.
Related guidance: VCC trading error classification and correction
Frequently asked questions
Can a surveillance alert be closed as a false positive immediately?
Only after the team validates the input data, rule logic and relevant context. A plausible explanation is not enough if the alert uses incomplete mapping or the supporting evidence cannot be traced to authoritative records.
Should the rule be tuned during the investigation?
Preserve and reperform the rule version that generated the alert. If tuning is needed, open a separate controlled change with testing and approval. Changing the active case logic can destroy the ability to reconstruct why the alert appeared.
What if the alert concerns senior staff?
Use an investigator and approver with sufficient independence, manage conflicts and follow the defined escalation route. Seniority should not reduce evidence standards or allow the subject to control the collection and interpretation of their own case records.
Does a legitimate investment rationale automatically close the alert?
No. The rationale must be supported by contemporaneous evidence and consistent with order handling, allocation, restriction and communication controls. A legitimate strategy purpose can coexist with a data or process breach that still requires action.
When is remediation complete?
Remediation is complete when the underlying data, rule, procedure, access, training or supervision gap is corrected, tested and reviewed, and when any affected historical population has been assessed. Closing the individual alert does not by itself close the control issue.
Official sources and further reading
- Risk Management Practices for Fund Management Companies (Monetary Authority of Singapore)
- Securities and Futures (Licensing and Conduct of Business) Regulations (Singapore Statutes Online)
- Guideline on Licensing, Registration and Conduct of Business for Fund Managers (Monetary Authority of Singapore)
- Legal Obligations of a VCC Director (Accounting and Corporate Regulatory Authority)
- Notice on Execution of Customers Orders (Monetary Authority of Singapore)
- Guidelines to the Notice on Execution of Customers Orders (Monetary Authority of Singapore)
Discuss a Singapore VCC structure
For help coordinating a Singapore VCC setup or corporate administration, contact Raffles Corporate Services.
General information only. This article is not legal, tax, regulatory or investment advice and does not imply affiliation with or endorsement by ACRA, MAS or IRAS.