The Financial Edge — The CCO Override Issue
September 23, 2026
From Bo Howell
Three SEC enforcement actions closed in the same two-week window this September. The pattern is not coincidence — it is a signal. Firms ignored their own compliance officers, left registration requirements unaddressed, and allowed internal controls to fail at the staff level. Each case produced a dollar judgment, a permanent bar, or both. Your firm cannot afford the same outcome.
FROM THE BLOG
ENFORCEMENT
The SEC fined a firm $500,000 for overriding its own CCO
Independent Financial Group's $500,000 penalty was not about missing a rule — it was about ignoring the person paid to catch it.
$500,000
Civil penalty
34-106287
Exchange Act release
Cease-and-desist
Order type
Censure
Additional sanction
Key takeaways
- Pull your 13F calendar. Confirm every quarterly deadline is calendared with a named responsible person.
- Document CCO recommendations. Every compliance recommendation must be logged with a disposition — filed, deferred with written rationale, or escalated.
- Define override authority. No business-side executive should have unilateral power to ignore a written CCO recommendation without board-level sign-off.
Why it matters
“The CCO flagged the Form 13F obligation. Management did not file. That sequence is what turned a paperwork gap into a half-million-dollar penalty.”
FROM THE BLOG
FUND FRAUD
An executive assistant stole $1.28M — the charging decision matters more
The SEC's case against Ellen Polcari exposes how fund managers assign payment authority without the controls to match it.
$1.28M
Alleged misappropriation
1:26-cv-12318
NJ district docket
LR-26642
Litigation release
Key takeaways
- Audit payment authorization levels. No single non-principal employee should hold unilateral disbursement authority over fund accounts.
- Require dual approval on fund transfers. All investor-capital outflows above a defined threshold must carry two authorized signatures.
- Review access quarterly. Staff turnover and role changes make annual-only reviews a liability — run access audits every quarter.
Why it matters
“Polcari was not a portfolio manager or a principal — she was an executive assistant. The access she had should never have reached $1.28 million in fund cash.”
FROM THE BLOG
REGISTRATION
A $3.2M judgment against a fund manager who never registered
Waldon Fenster raised investor money, managed a fund, and skipped registration — the Illinois federal court's consent judgment is a permanent lesson.
$2,516,120.80
Disgorgement ordered
$450,012.39
Prejudgment interest
$236,451.00
Civil penalty
Permanent bar
Securities activity
Key takeaways
- Confirm your registration status now. If your firm manages third-party capital, verify which exemptions apply and whether any threshold has been crossed.
- Map your AUM triggers. Registration thresholds shift — build a quarterly check into your compliance calendar before the SEC builds a case file.
- Engage counsel before the next raise. Unregistered fund activity does not become permissible retroactively; the time to fix it is before capital is called.
Why it matters
“Fenster ran a fund, collected investor money, and never registered. The result: a permanent securities bar and a $3.2 million judgment.”
COMPLIANCE CORNER
OPEN FILES
Three cases, one common thread: internal controls that existed on paper only
The September 2026 enforcement actions show the SEC moving against registration failures, internal-access gaps, and CCO override patterns simultaneously.
Deadlines
| 2026-12-31 | Calendar Q4 Form 13F filing deadline and assign a named filer — Independent Financial Group's failure began with no accountable owner. |
| 2026-10-31 | Complete Q3 payment-authorization and fund-access audit for all staff with disbursement authority over investor capital. |
Litigation watch
- SEC v. Polcari, Case No. 1:26-cv-12318 (D.N.J.) — pending; watch for disgorgement and penalty amounts at final judgment.
- In re Independent Financial Group, LLC, Exchange Act Release No. 34-106287 — settled September 8, 2026; cease-and-desist and $500,000 penalty in effect.
- SEC v. Fenster (N.D. Ill.) — consent judgment entered September 11, 2026; permanent securities bar enforced.
YOUR MOVE
FIRM MOVES
Four moves your firm makes before the next SEC exam cycle opens
Each item maps directly to a failure pattern from the September 2026 enforcement cases — treat this as your pre-exam checklist.
Registered Investment Advisers
- Establish a written CCO escalation policy that requires documented disposition of every formal compliance recommendation.
- Verify Form 13F filing obligations and confirm the responsible filer is named in your compliance calendar.
- Schedule a board-level review of all open CCO recommendations before year-end.
Digital Asset Issuers
- Map current AUM against federal and state registration thresholds — Fenster's bar is a permanent reminder that no exemption is self-executing.
- Document the specific exemption your firm relies on for each active offering with a named attorney sign-off.
Fintech Founders / Startups
- Implement dual-approval requirements on all fund or client-capital disbursements above your defined threshold.
- Run a quarterly access audit for every employee with payment or transfer authority — role changes happen faster than annual reviews can catch.