What the FCA expects in a suitability report: COBS 9 and COBS 9A mapped to file checks
The suitability report is where Consumer Duty evidence is made or missed. The COBS 9 and 9A rules translate into eleven check areas — the same ones the default rubric scores.
The 11 check areas at a glance
| Check area | What the report must show | FCA rule |
|---|---|---|
| Suitability reasoning | The report explains why the recommendation is suitable for this client, not boilerplate. | COBS 9.4.7R(2) / COBS 9A.3.3R(1)(a) |
| Client circumstances | The client's actual circumstances, objectives, and risk tolerance are obtained and reflected. | COBS 9.2.1R / COBS 9A.3.3R(1)(b) |
| Vulnerability assessment | Vulnerability is considered and documented — or explicitly ruled out, with why. | FG21/1 |
| Cost disclosure | Charges and their impact on returns are disclosed so the client can understand the cost. | PRIN 2A.4 / COBS 9.4.7R(2) |
| Product alternatives | Alternatives are named and the reasons for rejection documented. | COBS 9.4.7R(2) / FG12/16 |
| Risk disclosure | Key risks are communicated clearly, fairly, and understandably. | COBS 9.4.7R(2) / Principle 7 |
| Transaction disadvantages | Possible disadvantages of the transaction are explained, including lost benefits or penalties. | COBS 9.4.7R(3) |
| Consumer understanding | The report is written in plain language the client can follow. | PRIN 2A.5 |
| Ongoing service commitment | The ongoing service, review frequency, and next review date are stated. | PRIN 2A.6 / COBS 9A.3.3R(2) |
| Capacity for loss | The client's ability to bear losses is addressed against their circumstances. | COBS 9.2.2R / COBS 9A.3.3R(1)(b)(iii) |
| Tax efficiency | Tax implications are considered and documented, including wrappers used. | COBS 9.2.1R / COBS 9.4.7R(2) |
| Check | Result | What the reviewer sees |
|---|---|---|
| ObjectivesReport §2 | PASS | Rationale quotes the client's objective in their own words |
| VulnerabilityReport §4 | PASS | Considered and documented; no indicators identified, reason given |
| ChargesReport §6, p.3 | AMBER | Ongoing charge stated, but impact on returns not shown |
| AlternativesReport §7 | FAIL | Alternatives named without the reason they were discounted |
| Capacity for lossReport §5 | PASS | Loss impact addressed against stated circumstances |
| Ongoing serviceReport §9 | AMBER | Review promised, but no next review date |
The COBS 9 and COBS 9A foundations
COBS 9.2.1R requires a firm to take reasonable steps to ensure that a personal recommendation is suitable for the client — based on the client's needs and circumstances, their knowledge and experience, and their attitude to risk and capacity for loss. COBS 9.4.7R builds the report on top: it must explain why the recommendation is suitable (paragraph (2)) and explain possible disadvantages of the transaction (paragraph (3)). The FCA's Consumer Duty pages set out where these sit alongside the duty's outcomes.
COBS 9A mirrors that structure for advised sales of consumer investments, adding express requirements on how the recommendation is recorded. The four Consumer Duty outcomes carry the same intent — the price and value outcome (PRIN 2A.4), consumer understanding (PRIN 2A.5), and the ongoing service commitment (PRIN 2A.6), in particular, all land in the suitability report.
For ongoing advice the assessment is not a point-of-sale event. The annual review re-tests the recommendation against the client's current circumstances, and the file records that re-test — what was checked, what changed, and what was confirmed. The eleven checks apply to the file in its current state, which is why a review that only restates last year's wording fails the same checks an empty file fails.
Suitability reasoning
COBS 9.4.7R(2) / COBS 9A.3.3R(1)(a)The report explains why the recommendation is suitable for this client, not boilerplate.
Client circumstances
COBS 9.2.1R / COBS 9A.3.3R(1)(b)The client's actual circumstances, objectives, and risk tolerance are obtained and reflected.
Vulnerability assessment
FG21/1Vulnerability is considered and documented — or explicitly ruled out, with why.
Cost disclosure
PRIN 2A.4 / COBS 9.4.7R(2)Charges and their impact on returns are disclosed so the client can understand the cost.
Product alternatives
COBS 9.4.7R(2) / FG12/16Alternatives are named and the reasons for rejection documented.
Risk disclosure
COBS 9.4.7R(2) / Principle 7Key risks are communicated clearly, fairly, and understandably.
Transaction disadvantages
COBS 9.4.7R(3)Possible disadvantages of the transaction are explained, including lost benefits or penalties.
Consumer understanding
PRIN 2A.5The report is written in plain language the client can follow.
Ongoing service commitment
PRIN 2A.6 / COBS 9A.3.3R(2)The ongoing service, review frequency, and next review date are stated.
Capacity for loss
COBS 9.2.2R / COBS 9A.3.3R(1)(b)(iii)The client's ability to bear losses is addressed against their circumstances.
Tax efficiency
COBS 9.2.1R / COBS 9.4.7R(2)Tax implications are considered and documented, including wrappers used.
These are the checks a file review scores. A report that clears all eleven is a report that answers the FCA's evidence question before it is asked.
Where the eleven checks come from
Each check area maps to the rules above: suitability reasoning to COBS 9.4.7R(2), client circumstances and knowledge and experience to COBS 9.2.1R, capacity for loss to COBS 9.2.2R, transaction disadvantages to COBS 9.4.7R(3), and the Consumer Duty outcomes to PRIN 2A.4 to 2A.6. Vulnerability is covered by FG21/1, the FCA's finalised guidance on the fair treatment of vulnerable customers. The Consumer Duty publications library collects the good- and poor-practice examples that show what each check looks like when it is done well.
The FCA reads files cold. Its enforcement lessons, set out in the Enforcement Watch series, keep returning to reports that asserted suitability without carrying the evidence for it. The eleven checks are the reviewer's scoring grid for that evidence.
Worked example: the report that answers the evidence question
One recommendation, two reports. Anonymised and illustrative.
Before
“Based on your attitude to risk we recommend a growth portfolio suitable for your objectives.” — no risk profile recorded, no capacity for loss, no alternatives, no costs shown, no disadvantages, no vulnerability line, no next review date.
After
The same recommendation rebuilt: the client's objective in their own words; fact-find and risk questionnaire referenced; capacity for loss tested against income, expenditure and a stated fall; alternatives named and discounted; initial and ongoing charges with their impact on returns; the disadvantages explained; vulnerability considered and ruled out; the ongoing service and next review date set out. A reviewer can follow the whole chain.
Most failing files sit between the two — an amber, not a fail: the vulnerability line is there but the characteristics are not listed; charges are shown but their impact is not; alternatives are named but the rejection is not explained. Amber is fix-before-ship, and a file that ships amber records the reason alongside the score.
Common mistakes across the eleven
- Boilerplate reasoning. A rationale that would fit any client fails suitability reasoning even when the recommendation is right.
- Vulnerability missing. The single most common miss — a file with no consideration line reads as no consideration at all.
- Alternatives absent. A recommendation with no named alternative and no reason for the choice cannot support the “why this one” question.
- Capacity inferred from attitude to risk. Willingness and ability are different; the file must address both (COBS 9.2.2R).
- Charges without impact. Costs disclosed as numbers with no effect on returns shown, so the price and value outcome is left unanswered.
The eleven at a glance
| Check | What passes | What fails |
|---|---|---|
| Suitability reasoning | Why this recommendation, for this client. | Boilerplate that fits anyone. |
| Client circumstances | Fact find reflected in the rationale. | A recommendation detached from the record. |
| Vulnerability assessment | Considered, with outcome and reasoning. | No line at all (FG21/1). |
| Cost disclosure | Charges shown with impact on returns. | A percentage with no effect explained. |
| Product alternatives | Named, compared, rejection explained. | None named, or a bare statement. |
| Risk disclosure | Risks specific to the recommendation. | Generic market-risk wording. |
| Transaction disadvantages | Penalties, lost benefits explained. | Nothing on what the client gives up. |
| Consumer understanding | Plain language the client can follow. | Jargon and unexplained terms. |
| Ongoing service commitment | Service, frequency and next review stated. | Vague or missing. |
| Capacity for loss | Tested against stated circumstances. | Inferred from attitude to risk. |
| Tax efficiency | Wrappers and tax implications considered. | No tax consideration recorded. |
How the eleven read in a cold review
A reviewer scores each check Pass, Amber or Fail against the file — not against what the adviser remembers. Pass means the evidence is there and reasoned; amber means it is thin enough to need a second look; fail means it is missing. The amber list is where the review finds its work: the fixes that make a file demonstrable.
The same grid is what a firm's own review, a compliance consultant, and an FCA information request all use in effect — the questions are the same because the expectations are. Keeping one mapping means the file answers those questions once, consistently, and the results across advisers and quarters can be compared — which is what turns file review into outcomes monitoring rather than a scatter of individual reads.
Proportionality shapes how each check is evidenced, not which checks run. A one-adviser firm files a shorter rationale for a simple product; the check that the rationale exists and is reasoned does not change. The grid keeps the standard fixed while the depth scales with the client and the product.
Related reads
This mapping is the rulebook for the file review and suitability hub. Turn it into action with the 12-point pre-send checklist, lay the report out with the 12-section report anatomy, and keep the file current with the annual review process.
Frequently asked questions
Are COBS 9 and COBS 9A the same thing?
No. COBS 9 governs suitability for retail clients generally; COBS 9A applies the same expectations to advised sales of consumer investments. Both rest on the same requirement: a personal recommendation must be suitable for the client, and the report must show why.
Do these rules apply to every recommendation?
The suitability obligation applies to personal recommendations in retail business. The depth of the file scales with the risk and complexity of the recommendation, but the report must still explain why it is suitable, the disadvantages, and the basis in the client's circumstances.
Is a template enough to pass the eleven checks?
A good template gets the structure right, but a template filled with generic wording fails the same checks an empty file fails. Each item has to be answered for the client in front of you.
Who should check the report against the eleven?
Whoever reviews the file — a compliance consultant, a reviewer, or the principal where there is no separate compliance function. The sign-off line records that the check ran and the judgement was made.
Your next step
Map your current report template to the eleven checks and score one recent file against it — the gaps will show up as empty cells. Proven Duty reviews files against this same set and returns the per-check output, so the evidence builds with every report. Start a free trial or see pricing.
Sources
- COBS 9.2 (FCA Handbook)
- COBS 9.4 (FCA Handbook)
- COBS 9A.3 (FCA Handbook)
- PRIN 2A.4 — The price and value outcome (FCA Handbook)
- PRIN 2A.5 — The consumer understanding outcome (FCA Handbook)
- PRIN 2A.6 — The consumer support outcome (FCA Handbook)
- FG21/1 — Guidance for firms on the fair treatment of vulnerable customers (FCA)
- FG12/16 — Assessing suitability: replacement business and centralised investment propositions (FCA)