SEC Exam Handbook: The Number It Leaves Out Matters Most for RIAs

SEC Exam Handbook: 19 Pages, No Average Exam Length
The SEC's Division of Examinations published The SEC Exam Handbook: A Practical Guide on Process and Engagement on October 1, 2026. It gives every registered investment adviser, fund complex, and broker-dealer a single document describing how an SEC exam runs, from risk assessment through the disposition letter. The Investment Adviser Association welcomed the publication, and trade press describes the handbook as 19 pages, expanding on a previous five-page brochure.
But the handbook leaves out the number most firms want. For all its added length, the handbook does not tell you how long an exam lasts. According to commentary in the National Law Review, it offers no average exam duration. The only hard timeline it references is the requirement that a disposition letter be issued within 180 days of on-site examinations, a deadline that traces to Section 929U of the Dodd-Frank Act.
That gap matters more than most of what the handbook does say. Here is what changed, why the missing number is the real story, and what your leadership team should decide before examiners call.
What the Handbook Covers and What It Replaces
The handbook replaces and expands upon the Division's prior examination brochure, which WilmerHale identifies as the 2023 brochure. According to the SEC's announcement, it covers each stage of an exam, from the risk assessment process through the disposition letter. It also lists avenues for feedback or questions and gives practical tips for preparing. The full text is posted as a PDF on sec.gov and featured under "What's New" on the Division of Examinations webpage.
The handbook also lays out the Division's structure. EXAMS is organized into five specialized programs:
- Investment Adviser/Investment Company
- Broker-Dealer and Exchange
- FINRA and Securities Industry Oversight
- Clearance and Settlement
- Technology Controls
The last item deserves attention from CTOs and heads of engineering. Technology Controls is listed as its own program, alongside the programs organized by type of registrant. The structure suggests the Division treats technology oversight as a discipline in its own right, not only as a subtopic inside an adviser exam.
Keith Cassidy, Director of the Division of Examinations, said in the announcement that the goal is "to make the process more consistent and predictable for everyone involved." Even so, the handbook still declines to say how long an exam lasts.
Process Transparency Is Not a Safe Harbor
The handbook is staff guidance, not a rulemaking. Its closing text states that it creates no new or additional obligations for any person. No Federal Register docket, comment period, or effective date is attached to it, and none of the SEC materials describe it as binding. That distinction has practical consequences for how your firm should use it.
Process guidance tells you how the exam will run. It explains sequencing, the channels for communicating with examiners, and what to expect at each stage, from risk assessment to the disposition letter.
Substantive obligations tell you what examiners will test. Those obligations still come from the Advisers Act, the Investment Company Act, the Exchange Act, and the rules adopted under them. A firm that follows every practical tip in the handbook but lacks a functioning compliance program is exactly as exposed as it was on September 30.
WilmerHale's alert frames the release as a new handbook built on a familiar playbook, and that is the right way to read it. The handbook gathers existing expectations in one place. It does not lower the bar.
The RIA Compliance Read: Your Production Speed Sets the Pace
For a registered investment adviser, the absence of an average exam duration is one of the most telling features of the handbook. The statutory backstop is the 180-day disposition-letter requirement. Before that point, document requests, interviews, and follow-up questions move at a pace your firm strongly influences.
The math is simple. The handbook will not say how long an exam lasts, so the variable you control is how quickly and cleanly your firm answers requests. Slow, incomplete, or inconsistent production keeps examiners asking questions for longer. Clean production shortens that window.
Where exams stall
- Policies that do not match practice. A compliance manual that describes procedures nobody follows invites follow-up requests.
- Records scattered across systems. A request that requires pulling data from several vendors takes days instead of hours.
- Inconsistent answers from different people. When the CCO, the CFO, and a portfolio manager describe the same process differently, examiners keep digging.
The public summaries of the handbook do not confirm the exact event that starts the 180-day clock or how extensions work. Ask your outside counsel how the clock is measured for your exam. Do not assume the first on-site visit is the controlling date.
What Your Leadership Team Should Decide This Quarter
Decisions for the CEO and CCO
First, assign one owner to read the handbook end to end. That person should be the CCO or a direct report. Their job is to map each exam stage the handbook describes to a named person and a written procedure at your firm.
Second, run a mock document request. Pick ten items examiners commonly request and time how long your team takes to produce them. The result is your realistic baseline, and the handbook does not provide one.
Third, bring your CTO into exam planning. Technology Controls is one of the five EXAMS programs. Engineering leadership should be able to explain access controls, vendor oversight, and system change management without a compliance officer translating.
Fourth, pre-stage your core records. Keep these items current and retrievable within a day:
- Form ADV and recent amendments
- The compliance manual and the most recent annual review
- Code of ethics and personal trading records
- Marketing materials and the supporting substantiation
- Fee billing and trade records
The board-level question
The real question is not whether your firm has read the handbook. It is whether your firm could produce a clean, consistent record set on short notice. If the honest answer is no, the cost will appear as a longer exam, more management time spent answering examiners, and a disposition letter with more findings to remediate.
FinTech Law's SEC exam counsel team runs mock document requests, pre-stages core records, and manages responses to examiner requests and deficiency letters.
Contact FinTech Law to review how this applies to your business.
This communication is for informational purposes only and is not legal advice.
FinTech Law fixed engagements: Startup Legal Path Review ($1,500) · Emerging Manager Launch Kit ($7,500) · Regulatory Path Outline ($7,500) · RIA/ERA Registration ($8,500) · Private Fund Formation (~$18,000) · Fractional General Counsel · $7,500/qtr (from Jan 2027). See the catalog.