FINMA Guidance: Product Risks in Individual Portfolio Management
Switzerland's financial markets regulator, FINMA, published a formal Guidance document on 3 June 2026 setting out the risk patterns it has been identifying in how products are used within individual portfolio management mandates. The trigger is a measurable rise in escalation cases involving portfolio managers supervised under Article 17 of the Financial Institutions Act (FinIA), and the regulator's concern is direct: clients have suffered significant losses, and the supervisory burden on FINMA itself has grown considerably. For accounting firms, auditors, and CFOs with Swiss-regulated counterparties or operations, this Guidance is a governance checkpoint, not a background read.
What the FINMA Guidance Actually Says
The Guidance is structured around three interlocking themes: early risk identification, robust governance, and the consistent, client-focused application of rules of conduct. FINMA is not introducing new rules here. Instead, it is reminding supervised institutions that existing obligations, already embedded in FinIA and the supporting ordinances, are not being met with sufficient rigour in a growing number of cases.
The escalation case trend
The number of escalation cases under Article 17 FinIA rose over the past year. FINMA defines these as cases where shortcomings at portfolio management firms were serious enough to be referred up to the regulator rather than being handled at the supervisory body level. That escalation pathway exists precisely because FinIA created a tiered oversight structure for smaller asset managers, routing day-to-day supervision through recognised supervisory organisations before FINMA steps in. A rising escalation rate signals that the first-line supervisory filter is not catching problems early enough, or that the problems themselves are becoming more acute.
Recurring risk patterns identified
FINMA's analysis of these cases produced a set of recurring patterns. While the Guidance does not enumerate every pattern in exhaustive detail, the regulator identifies the use of products within individual mandates as the common thread. The implication is that portfolio managers are selecting, recommending, or placing products in ways that do not align with client suitability requirements or the conduct rules under FinIA. In some of the escalated cases, the outcome was material financial loss for clients. That result is precisely what suitability and conduct frameworks are designed to prevent.
The FinIA Framework FINMA Is Invoking
Understanding the Guidance requires a clear picture of the regulatory scaffolding it sits within.
Article 17 FinIA and portfolio managers
Article 17 of the Financial Institutions Act governs portfolio managers operating in Switzerland who are not part of a prudentially supervised banking or insurance group. These are typically independent asset managers or boutique firms. FinIA brought them into a formal licensing and supervision regime for the first time, and they are required to affiliate with a recognised supervisory organisation. FINMA sits above that layer, acting as the ultimate supervisory authority and the escalation point when a supervisory organisation cannot resolve a problem through its own mechanisms.
Rules of conduct under FinIA
The conduct rules that FINMA references cover the full lifecycle of a client relationship in an individual mandate: client classification, suitability assessment, information obligations, and ongoing monitoring of the portfolio against the agreed investment strategy. The Guidance signals that FINMA is seeing breakdowns across more than one of these stages. A product that passes an initial suitability screen at onboarding can still generate a conduct problem if it is held beyond the point at which it remains suitable, or if the client's circumstances change without the manager updating the assessment.
Why This Matters for Accounting Firms and Auditors
The connection between a supervisory guidance note on portfolio management conduct and the work of an accounting firm or auditor is not always obvious. It becomes clear when you consider what escalation cases produce: regulatory findings, potential enforcement action, compensation claims, and in some instances restatement risk where client accounts or fund vehicles are involved.
Audit and assurance implications
For auditors of FinIA-supervised portfolio managers, the Guidance is effectively a signal about where FINMA expects to find weaknesses. Audit teams reviewing internal controls at asset management firms should treat FINMA's identified risk patterns as a ready-made risk indicator list. Governance structures, the quality of suitability documentation, and the consistency of product selection processes relative to mandate agreements are all areas where audit evidence should be gathered with fresh scrutiny.
Swiss auditors working under the Swiss Auditing Standards framework already have obligations to consider regulatory compliance as part of their engagement risk assessment. A published FINMA Guidance of this kind, especially one that references client losses and supervisory resource strain, raises the baseline expectation for what a reasonable audit team should look at. Firms that are using crypto accounting software or digital asset accounting software to manage client portfolios that include tokenised products or digital assets face an additional layer of complexity: the conduct rules apply to the underlying economic exposure, not the technical form of the product.
CFO and operational risk considerations
CFOs at firms that delegate investment management to third-party Swiss portfolio managers have an indirect exposure here. If the delegated manager is subject to a FINMA escalation finding, the CFO's firm may face questions about its due diligence on the appointment, the adequacy of ongoing monitoring, and whether mandate terms were properly documented. These are governance questions with potential accounting consequences: impairment of assets managed under a delegated mandate, disclosure obligations under IFRS or Swiss GAAP if a regulatory action is material, and the reliability of valuations produced by a manager whose conduct controls are under scrutiny.
Practical Steps for Swiss-Regulated Firms
The Guidance is published as a reference document, which means FINMA expects supervised institutions to read it and act, not wait for an individual supervisory communication.
Governance and control reviews
Portfolio managers should review their product governance frameworks against the three pillars FINMA highlights: early risk identification, structural governance robustness, and client-focused conduct application. For accounting and compliance teams supporting these managers, that review should produce documented evidence, not just a verbal sign-off. FINMA's escalation cases tend to share a common characteristic: the problem was identifiable earlier than it was identified, and the documentation trail was insufficient to demonstrate that anyone was looking.
Suitability documentation
The specific context of product use in individual mandates means suitability documentation is the central operational control. Firms should verify that their suitability assessments are current, that they are re-run when client circumstances change, and that the rationale for specific product selections within each mandate is captured in a form that a supervisory organisation, or FINMA, could review. Where firms use software tools, including crypto bookkeeping software or broader digital asset accounting software, to track portfolio positions, those tools need to produce outputs that feed back into the suitability record, not run in parallel to it.
Supervisory organisation engagement
The tiered FinIA structure means that a portfolio manager's first point of regulatory contact is its supervisory organisation, not FINMA. Firms that have received any feedback from their supervisory organisation about conduct or product governance in the past twelve months should treat the FINMA Guidance as confirmation that those issues are on the regulator's radar at the highest level. Addressing them proactively, with documented remediation, is substantially better than waiting for an escalation.
For context on how FINMA has been approaching broader supervisory risk themes, see FINMA's 2025 supervision report on crypto custody and DLT trading, which sets out the regulator's wider risk priorities for digitally active firms. On the AML side, FINMA's supplementary AML risk analysis guidance for banks and FinIA institutions covers the parallel money-laundering risk assessment obligations that apply to the same supervised population.
Accounting and Disclosure Implications
When a regulatory escalation results in a finding against a portfolio manager, the accounting implications for affected entities can be significant and are sometimes underestimated until it is too late to manage them cleanly.
Asset valuation and impairment
Where a client's assets have suffered losses that are attributable to conduct failures by the portfolio manager, there are questions about the carrying value of those assets in the client's own financial statements. If the loss is already realised, the accounting treatment is usually straightforward. If the loss is contingent on the outcome of a regulatory or legal process, IAS 37 (or the Swiss GAAP equivalent) governs whether a provision or contingent liability disclosure is required. Auditors and CFOs need to track the progress of escalation cases involving their managers and assess materiality for reporting purposes.
Related-party and concentration disclosures
For institutional clients with concentrated mandates at a single portfolio manager, a regulatory action can also trigger concentration risk disclosures. If the manager is a related party under IFRS or Swiss GAAP definitions, the disclosure requirements broaden further. These are not hypothetical scenarios: FINMA's Guidance notes that some escalated cases produced significant losses for some clients, which is precisely the kind of outcome that moves from a supervisory footnote to a disclosure item.
The Broader Context: FinIA's Maturing Supervisory Regime
FinIA came into force in 2020, and the independent portfolio manager population has now had several years to embed the required governance and conduct structures. FINMA's decision to publish a Guidance at this point, rather than simply issuing individual supervisory communications, suggests that the regulator considers the shortcomings it is seeing to be systemic enough to warrant a sector-wide response. The rising escalation count and the client loss outcomes give that judgement credibility.
For accounting professionals and CFOs, the practical read is this: the FinIA supervisory regime for portfolio managers is now operating with enough history to identify what good compliance looks like, and FINMA is using that reference point to push the sector upward. Firms that are relying on the fact that they have not yet received a supervisory finding should treat the Guidance as a prompt to verify that their controls would hold up if they did.
Firms that manage portfolios containing digital assets or tokenised instruments face a specific overlay. The conduct rules apply to these products just as they do to traditional securities, but the documentation and valuation workflows are often less mature. Reliable crypto accounting software that integrates with suitability and mandate management systems is not just an operational convenience in this environment; it is part of the evidence base that a supervisory review would examine.
Source: FINMA
Frequently Asked Questions
What is the FINMA Guidance on product use in individual portfolio management?
It is a formal supervisory document published by FINMA on 3 June 2026 that sets out the risk patterns the regulator has identified in escalation cases involving portfolio managers licensed under Article 17 FinIA. It does not introduce new rules but reminds institutions of existing obligations around governance, early risk identification, and client-focused conduct when selecting and using products within individual mandates.
Who does the Guidance apply to?
The primary audience is portfolio managers supervised under Article 17 of the Swiss Financial Institutions Act and their affiliated supervisory organisations. It also has practical relevance for the auditors of these firms, the CFOs of institutional clients who delegate portfolio management to them, and any compliance or accounting professional supporting a Swiss-regulated asset management operation.
What are escalation cases under FinIA?
Under the FinIA framework, independent portfolio managers are supervised day-to-day by recognised supervisory organisations. An escalation case is one where a shortcoming is serious enough that the supervisory organisation refers it to FINMA. FINMA's Guidance notes that the number of such cases increased over the past year and that some resulted in significant client losses.
What are the accounting implications of a FINMA escalation finding?
For affected clients, realised losses may need to be recognised immediately. Contingent outcomes from ongoing regulatory or legal processes may require provisioning or disclosure under IAS 37 or Swiss GAAP equivalents. Concentration risk disclosures may also be triggered where a client has a significant mandate with a manager under scrutiny. Auditors should assess materiality and ensure the financial statements reflect the current state of any proceedings.
How does this Guidance affect firms managing digital asset portfolios?
The conduct and suitability rules under FinIA apply to all products used in individual mandates, including digital assets and tokenised instruments. Firms managing these portfolios need to ensure that their suitability documentation, product governance processes, and position-level records, including outputs from any crypto accounting software or digital asset accounting software, are integrated into a coherent compliance evidence base that would withstand supervisory review.