The first hire was careful. You walked them through the compliance program personally, collected everything you needed, made sure their outside accounts were registered for trade monitoring before their first day. The second and third hires went roughly the same way. By the fourth, the process was familiar enough that it felt like a system.

It was not a system. It was a habit, specifically yours, and the difference between those two things becomes visible around the fifth hire.

The fifth advisor brings the same onboarding requirements as the first four: outside business activity disclosures, personal securities account registration, code of ethics acknowledgment, background review, disclosure history from prior firms. What’s different is that you’re now managing four existing advisors, a marketing program, a client base that’s grown with the firm, and a compliance calendar that’s more demanding than it was when you had two people. The bandwidth that made the first four hires feel manageable isn’t there in the same way.

This is when the gaps compound. Not because the fifth hire is more complicated, they rarely are, but because the process that worked when compliance was the only thing on the agenda does not work when it is one of twelve.

Here’s what your compliance program doesn’t know about your newest advisor, and why each gap matters.

Their Outside Business Activities

Every advisor brings a history: prior firm relationships, board memberships, outside investment activities, and income sources unrelated to your firm. The Outside Business Activity disclosure is designed to surface all of it, not because outside activities are inherently problematic, but because your firm needs to evaluate each one against your compliance policies and document that evaluation.

The onboarding process that worked for the first few hires usually involved a direct conversation: you asked, they disclosed, you made a judgment call, you moved on. At five advisors, that conversation is happening while you’re managing the others, responding to a client question, and reviewing a marketing piece that needs to go out this week.

What gets missed is usually not the obvious outside activities: the board seat the advisor mentioned in their interview or the side consulting arrangement they flagged upfront. It is the activities that did not come up because nobody asked the right question. The brokerage account at a former employer that was technically closed but still holds a small position. The family business relationship that does not feel like an outside business activity to the advisor but meets your policy’s definition. The ongoing involvement with a prior firm’s clients that the advisor considers informal but the SEC considers relevant to supervision.

A repeatable OBA disclosure process, one that asks the same specific questions in the same specific way regardless of who is conducting the onboarding, surfaces these issues. A conversation-based process surfaces whatever the conversation happens to cover.

Their Personal Securities Accounts

Trade monitoring depends entirely on the accuracy of the account list. An advisor whose personal brokerage accounts are not fully registered in your surveillance system is invisible to the monitoring process, not because the system is failing, but because it does not know what to look for.

The first four advisors had their accounts registered because you handled it personally and followed up until it was done. The fifth advisor submitted the initial disclosure, you added the obvious accounts, and the follow-up that would have caught the account at the custodian they used at their prior firm, the one they forgot to mention because they have not traded in it for eight months, did not happen because you had other things running.

That account still exists. It may have holdings that overlap with client positions. It may have trades that your surveillance should be reviewing. Your system doesn’t know it exists.

The gap here is not compliance negligence. It is the absence of a process that verifies completeness rather than accepting the initial disclosure at face value. A personal account registration process that requires advisors to produce statements from every brokerage relationship, not just the ones they remember to list, closes this gap. A process that asks, “Do you have any personal accounts?” and accepts the answer does not.

Their Disclosure History

Every advisor who joins your firm from another registered firm brings a disclosure history: U4 filings, customer complaints, regulatory actions, terminations, and financial disclosures. Most of that history is publicly accessible through BrokerCheck. What is less accessible is the context behind it.

A disclosure that looks minor in isolation may be more significant in the context of the advisor’s full history. A customer complaint resolved with a small settlement might be the only one, or it might be one of several that together suggest a pattern. A termination listed as voluntary might have circumstances worth understanding before the advisor is in front of your clients.

The background review process at most smaller firms is a BrokerCheck search conducted at hire. What it is not is a documented evaluation of what the search found and what the firm’s conclusion was. When an examiner asks how your firm evaluates the disclosure history of new hires, not whether you check, but what your process is for interpreting what you find and determining it is acceptable, the answer needs to be a documented procedure, not a description of what you remember doing.

What Their Prior Firm Knew That You Don’t

The advisor who joins your firm isn’t starting fresh. They’re bringing clients, relationships, habits, and a compliance history that your program has no visibility into.

Prior firm compliance training that covered different policies than yours. Supervision structures that allowed practices your WSP prohibits. Client communication styles that developed under a different regulatory framework. Outside relationships that were acceptable at the prior firm but haven’t been evaluated against your specific policies.

None of this is disclosed in the standard onboarding process because none of it is formally required to be. The U4 captures regulatory history. It doesn’t capture the compliance culture the advisor developed over the last seven years.

The onboarding process that closes this gap asks different questions. Not just “do you have outside business activities” but “describe how you communicated with clients at your prior firm and what platforms you used.” Not just “do you have personal securities accounts” but “are there any compliance matters from your prior firm that are still unresolved or that you’d want us to be aware of.” These aren’t legally required questions. They’re the questions that surface the context your compliance program needs to actually supervise a new person effectively.

The Protocol Your First Four Hires Didn’t Need

The first four advisors did not expose the gap because the process was informal enough to flex around what each person needed. By the fifth hire, the informal process has accumulated enough inconsistency that it is no longer a process. It is a collection of slightly different experiences, each one shaped by whatever was happening in the firm the week that person joined.

The advisor who onboarded in a slow period got the thorough version. The one who joined the week of a client deliverable got the abbreviated version. The one whose prior firm had a spotless BrokerCheck record got less scrutiny on the background review than the one who had a disclosure that prompted follow-up questions. None of these variations were intentional. They were the natural output of a process that ran on the CCO’s attention rather than a defined protocol.

A repeatable onboarding protocol is not about bureaucracy. It is about ensuring that the fifth hire receives the same compliance onboarding as the first, regardless of what else is happening in the firm that week, regardless of how clean the candidate’s background appears, and regardless of how well the CCO already knows them from a prior working relationship.

The checklist that the protocol produces isn’t just an operational tool. It’s the documentation that demonstrates, when an examiner asks how the firm onboards new supervised persons, that there’s a consistent process rather than a variable one.

The Compound Problem

Each of the gaps above is recoverable individually. An outside business activity that wasn’t properly disclosed can be corrected. A personal account that wasn’t registered can be added to the surveillance system. A background review that wasn’t documented can be completed retroactively with a note explaining the timing.

What is harder to correct is the pattern: four or five advisors whose onboarding had slightly different gaps accumulated over the growth phase of the firm, discovered during exam preparation when someone finally conducts a systematic review of every supervised person’s file and finds that the files tell different stories.

The examiner’s question at that point isn’t about any individual gap. It’s about whether the firm has a compliance onboarding process or whether it has a compliance onboarding approximation that worked well enough when the firm was small and is now showing the strain of growth it wasn’t designed to handle.

The fifth advisor is rarely the one who creates the problem. They are usually the one who makes it visible: the hire that came at the moment when the informal process stopped being sufficient and the gap between what the compliance program knows about its supervised persons and what it should know became too wide to close with a conversation.

The right time to build the protocol was before the fifth hire. The second-best time is before the sixth.