CASS Oversight vs CASS Operations: Structuring the Function

Most conversations about CASS hiring focus on experience — which regime, how many years, what the reconciliation looked like. Fewer address the question that determines whether the arrangement actually works: who does the client money work, and who checks it? In larger firms that separation is obvious and staffed. In smaller ones the same person frequently prepares the reconciliation, reviews it, reports the breaches and is the named CASS oversight function — which is a control weakness the firm may not have articulated to itself. This guide sets out how the function divides, how to structure it at different scales, and how to hire for each side.

The rules themselves sit in the FCA Handbook’s CASS sourcebook, and our guide to CASS and client money covers the framework. This page is about the organisational design and the hiring that follows from it.

The two halves

CASS operations is the doing. Preparing the internal and external client money reconciliations, calculating the client money requirement and resource, identifying and clearing differences, processing the transfers that keep segregation correct, maintaining the acknowledgement letters and records, and producing the data for the client money and assets return. It is daily, detailed and deadline-driven.

CASS oversight is the assurance. Reviewing and challenging the reconciliation rather than preparing it, owning the breach register and the escalation, maintaining the CASS resolution pack, managing the CASS audit relationship, and reporting to senior management and the board on the firm’s client money position. Under the Senior Managers regime the oversight responsibility is allocated to a named individual — the FCA’s SM&CR pages set out how prescribed responsibilities are assigned, which makes it personal in a way operations is not.

The distinction matters because they demand different people. Qualification — ICAEW, ACCA or CIMA — is the baseline for both. Operations rewards precision, process discipline and stamina. Oversight rewards scepticism, the confidence to challenge, and the willingness to escalate something inconvenient.

Why separation matters

Three reasons, and the first is the one firms most often under-weight.

Self-review is not review. Someone checking their own reconciliation will not find the error they made, because the mistake is in their understanding rather than their arithmetic. This is the standard segregation argument and it applies with particular force where the consequence is a client money shortfall.

Escalation is harder when it is your own work. A breach discovered by the person who caused it creates an incentive that does not exist when someone else finds it. Nobody designs a function assuming bad faith — the point is that even conscientious people delay uncomfortable conversations about their own errors.

And key-person concentration becomes regulatory exposure. Where one person prepares, reviews and reports, their absence stops the control rather than slowing it. The CASS audit will ask what happens when that person is on leave, and “we catch up afterwards” is not a satisfying answer.

How the function divides at different scales

Small firm — under about £10m of client money, one or two finance staff. Realistically the Financial Controller or Finance Manager prepares, and the oversight function sits with the FD, a Head of Compliance or an external consultant. The reviewer does not need to be a CASS specialist to add value: someone competent who asks how each difference was cleared and looks at the ageing will catch a great deal. What does not work is nominal oversight — a signature from someone who has not looked.

Mid-sized firm — a dedicated CASS or client money role. A CASS accountant prepares, the Financial Controller or Head of Finance reviews, and the oversight function sits with a senior manager. This is the point at which most firms formalise the split, and it is usually triggered by an audit finding rather than by design.

Larger firm. A client money operations team, a separate CASS oversight or assurance function frequently reporting to compliance rather than finance, and internal audit above both. Here the tension reverses: oversight can become so distant from the operation that the challenge is theoretical.

Where firms most often go wrong

Nominal oversight. A named individual who signs the pack without the time or knowledge to challenge it. Common, understandable, and the arrangement most likely to be exposed by an audit.

Oversight without access. A compliance-based reviewer who cannot interrogate the underlying data and therefore reviews a summary. The reconciliation is where the truth is; a reviewer who never sees it is reviewing a description.

Operations without seniority. A capable but junior person preparing the reconciliation with no authority to insist that operations or the bank resolve something. Differences age, and ageing differences are how shortfalls form.

And documentation living in one head. The reconciliation methodology, the treatment of edge cases, the reason a particular difference recurs — if none of it is written down, the firm has a person rather than a process.

Hiring for each side

For operations, test the mechanics directly. Walk me through your reconciliation step by step; which differences recur and why; how do you clear an unallocated receipt; what would you check first in a new firm. Look for someone who describes the awkward parts without prompting — that is the marker of ownership rather than review. Our CASS accountant job description covers the specification and the interview questions guide the assessment.

For oversight, test judgement and independence. Tell me about a breach you escalated and what happened; describe a time you disagreed with the preparer; how do you satisfy yourself the reconciliation is right without redoing it; what do you report upward and how often. The critical quality is willingness to be unpopular, and it is genuinely testable — candidates who have never disagreed with anyone about client money have either not been looking or have not been listened to.

And be clear which you are advertising. A specification that describes preparation but expects oversight will attract operations people and disappoint everyone six months later — and vice versa. Naming the regime matters too, as our comparison of CASS 7 versus CASS 15 sets out.

The practical minimum for a small firm

If you cannot staff both sides properly, four things get you most of the way. Someone other than the preparer looks at the reconciliation monthly, with the working, and asks about the ageing. The methodology is documented to the point where a competent outsider could follow it. Breaches are logged and reported regardless of size, because the register is what demonstrates the control operates. And there is a named deputy who has actually done it, not merely been named. None of that requires headcount; all of it will be asked about at audit.

Where the firm genuinely cannot separate the roles internally, buying oversight in — a consultant or an interim reviewing quarterly — is a reasonable and proportionate answer, and considerably better than a nominal internal signature.