Proven Duty

What the FCA expects in a suitability report: COBS 9 and COBS 9A mapped to file checks

The suitability report is where Consumer Duty evidence is made or missed. The COBS 9 and 9A rules translate into eleven check areas — the same ones the default rubric scores.

The 11 check areas at a glance

The eleven suitability report check areas, the FCA rule behind each, and what the report must show
Check areaWhat the report must showFCA rule
Suitability reasoningThe report explains why the recommendation is suitable for this client, not boilerplate.COBS 9.4.7R(2) / COBS 9A.3.3R(1)(a)
Client circumstancesThe client's actual circumstances, objectives, and risk tolerance are obtained and reflected.COBS 9.2.1R / COBS 9A.3.3R(1)(b)
Vulnerability assessmentVulnerability is considered and documented — or explicitly ruled out, with why.FG21/1
Cost disclosureCharges and their impact on returns are disclosed so the client can understand the cost.PRIN 2A.4 / COBS 9.4.7R(2)
Product alternativesAlternatives are named and the reasons for rejection documented.COBS 9.4.7R(2) / FG12/16
Risk disclosureKey risks are communicated clearly, fairly, and understandably.COBS 9.4.7R(2) / Principle 7
Transaction disadvantagesPossible disadvantages of the transaction are explained, including lost benefits or penalties.COBS 9.4.7R(3)
Consumer understandingThe report is written in plain language the client can follow.PRIN 2A.5
Ongoing service commitmentThe ongoing service, review frequency, and next review date are stated.PRIN 2A.6 / COBS 9A.3.3R(2)
Capacity for lossThe client's ability to bear losses is addressed against their circumstances.COBS 9.2.2R / COBS 9A.3.3R(1)(b)(iii)
Tax efficiencyTax implications are considered and documented, including wrappers used.COBS 9.2.1R / COBS 9.4.7R(2)
Proven Duty — file reviewScored 4 Pass · 2 Amber · 1 Fail
Illustrative Proven Duty scorecard: six rubric checks with pass, amber, or fail results and the reason for each
CheckResultWhat the reviewer sees
ObjectivesReport §2PASSRationale quotes the client's objective in their own words
VulnerabilityReport §4PASSConsidered and documented; no indicators identified, reason given
ChargesReport §6, p.3AMBEROngoing charge stated, but impact on returns not shown
AlternativesReport §7FAILAlternatives named without the reason they were discounted
Capacity for lossReport §5PASSLoss impact addressed against stated circumstances
Ongoing serviceReport §9AMBERReview promised, but no next review date
Illustrative example — anonymised mock output, not a real client file.

The COBS 9 and COBS 9A foundations

COBS 9.2.1R requires a firm to take reasonable steps to ensure that a personal recommendation is suitable for the client — based on the client's needs and circumstances, their knowledge and experience, and their attitude to risk and capacity for loss. COBS 9.4.7R builds the report on top: it must explain why the recommendation is suitable (paragraph (2)) and explain possible disadvantages of the transaction (paragraph (3)). The FCA's Consumer Duty pages set out where these sit alongside the duty's outcomes.

COBS 9A mirrors that structure for advised sales of consumer investments, adding express requirements on how the recommendation is recorded. The four Consumer Duty outcomes carry the same intent — the price and value outcome (PRIN 2A.4), consumer understanding (PRIN 2A.5), and the ongoing service commitment (PRIN 2A.6), in particular, all land in the suitability report.

For ongoing advice the assessment is not a point-of-sale event. The annual review re-tests the recommendation against the client's current circumstances, and the file records that re-test — what was checked, what changed, and what was confirmed. The eleven checks apply to the file in its current state, which is why a review that only restates last year's wording fails the same checks an empty file fails.

These are the checks a file review scores. A report that clears all eleven is a report that answers the FCA's evidence question before it is asked.

Where the eleven checks come from

Each check area maps to the rules above: suitability reasoning to COBS 9.4.7R(2), client circumstances and knowledge and experience to COBS 9.2.1R, capacity for loss to COBS 9.2.2R, transaction disadvantages to COBS 9.4.7R(3), and the Consumer Duty outcomes to PRIN 2A.4 to 2A.6. Vulnerability is covered by FG21/1, the FCA's finalised guidance on the fair treatment of vulnerable customers. The Consumer Duty publications library collects the good- and poor-practice examples that show what each check looks like when it is done well.

The FCA reads files cold. Its enforcement lessons, set out in the Enforcement Watch series, keep returning to reports that asserted suitability without carrying the evidence for it. The eleven checks are the reviewer's scoring grid for that evidence.

Worked example: the report that answers the evidence question

One recommendation, two reports. Anonymised and illustrative.

Before

“Based on your attitude to risk we recommend a growth portfolio suitable for your objectives.” — no risk profile recorded, no capacity for loss, no alternatives, no costs shown, no disadvantages, no vulnerability line, no next review date.

After

The same recommendation rebuilt: the client's objective in their own words; fact-find and risk questionnaire referenced; capacity for loss tested against income, expenditure and a stated fall; alternatives named and discounted; initial and ongoing charges with their impact on returns; the disadvantages explained; vulnerability considered and ruled out; the ongoing service and next review date set out. A reviewer can follow the whole chain.

Most failing files sit between the two — an amber, not a fail: the vulnerability line is there but the characteristics are not listed; charges are shown but their impact is not; alternatives are named but the rejection is not explained. Amber is fix-before-ship, and a file that ships amber records the reason alongside the score.

Common mistakes across the eleven

The eleven at a glance

CheckWhat passesWhat fails
Suitability reasoningWhy this recommendation, for this client.Boilerplate that fits anyone.
Client circumstancesFact find reflected in the rationale.A recommendation detached from the record.
Vulnerability assessmentConsidered, with outcome and reasoning.No line at all (FG21/1).
Cost disclosureCharges shown with impact on returns.A percentage with no effect explained.
Product alternativesNamed, compared, rejection explained.None named, or a bare statement.
Risk disclosureRisks specific to the recommendation.Generic market-risk wording.
Transaction disadvantagesPenalties, lost benefits explained.Nothing on what the client gives up.
Consumer understandingPlain language the client can follow.Jargon and unexplained terms.
Ongoing service commitmentService, frequency and next review stated.Vague or missing.
Capacity for lossTested against stated circumstances.Inferred from attitude to risk.
Tax efficiencyWrappers and tax implications considered.No tax consideration recorded.

How the eleven read in a cold review

A reviewer scores each check Pass, Amber or Fail against the file — not against what the adviser remembers. Pass means the evidence is there and reasoned; amber means it is thin enough to need a second look; fail means it is missing. The amber list is where the review finds its work: the fixes that make a file demonstrable.

The same grid is what a firm's own review, a compliance consultant, and an FCA information request all use in effect — the questions are the same because the expectations are. Keeping one mapping means the file answers those questions once, consistently, and the results across advisers and quarters can be compared — which is what turns file review into outcomes monitoring rather than a scatter of individual reads.

Proportionality shapes how each check is evidenced, not which checks run. A one-adviser firm files a shorter rationale for a simple product; the check that the rationale exists and is reasoned does not change. The grid keeps the standard fixed while the depth scales with the client and the product.

Related reads

This mapping is the rulebook for the file review and suitability hub. Turn it into action with the 12-point pre-send checklist, lay the report out with the 12-section report anatomy, and keep the file current with the annual review process.

Frequently asked questions

Are COBS 9 and COBS 9A the same thing?

No. COBS 9 governs suitability for retail clients generally; COBS 9A applies the same expectations to advised sales of consumer investments. Both rest on the same requirement: a personal recommendation must be suitable for the client, and the report must show why.

Do these rules apply to every recommendation?

The suitability obligation applies to personal recommendations in retail business. The depth of the file scales with the risk and complexity of the recommendation, but the report must still explain why it is suitable, the disadvantages, and the basis in the client's circumstances.

Is a template enough to pass the eleven checks?

A good template gets the structure right, but a template filled with generic wording fails the same checks an empty file fails. Each item has to be answered for the client in front of you.

Who should check the report against the eleven?

Whoever reviews the file — a compliance consultant, a reviewer, or the principal where there is no separate compliance function. The sign-off line records that the check ran and the judgement was made.

Your next step

Map your current report template to the eleven checks and score one recent file against it — the gaps will show up as empty cells. Proven Duty reviews files against this same set and returns the per-check output, so the evidence builds with every report. Start a free trial or see pricing.

Sources