Case Study 1: Cornerstone Financial Group and the FCA Best Execution Thematic Review

Background

Setting: London, January–July 2023 Institution: Cornerstone Financial Group (fictional composite), a multi-jurisdictional investment firm with booking entities in London (Cornerstone UK Ltd, FCA-authorised) and Frankfurt (Cornerstone GmbH, BaFin-authorised). UK operations include equity execution for retail and institutional clients; Frankfurt operations focus on fixed income and structured products. Advisor: Rafael Torres, independent compliance consultant; formerly VP Compliance Technology, Meridian Capital Regulatory trigger: FCA thematic review letter received December 2022, requesting information on best execution frameworks across six named firms. Cornerstone UK Ltd was included.

The Regulatory Context

The FCA's thematic reviews on best execution are intelligence-led: the regulator typically selects firms from transaction data analysis, RTS 28 quality review, or prior supervisory correspondence. Cornerstone had published its RTS 28 report for 2021 in July 2022 — three months after the 30 April regulatory deadline — and the report had listed only two execution venues across all equity instrument classes, a concentration the FCA considered potentially indicative of inadequate execution quality oversight.

The FCA's thematic review letter requested, within sixty days:

  1. A copy of the current best execution policy
  2. The methodology and governance documentation for the Smart Order Routing (SOR) system configuration
  3. Evidence of the most recent execution quality review, including venue analysis
  4. Details of the RTS 28 publication process and the reasons for the 2022 late publication
  5. A description of how the firm ensures it is aware of UK-EU regulatory divergence affecting its execution obligations

Rafael was engaged in the second week of January, three weeks after the letter arrived.

Phase 1: Rapid Assessment (Weeks 1–3)

Discovery: What Existed on Paper

Rafael began with document review. Cornerstone UK's best execution framework consisted of:

  • Execution Policy (v4, October 2019): Forty-two pages. Well-written. Listed nine venues across equities, fixed income, and FX. Described the SOR as evaluating venues by "price, liquidity, reliability, and cost" in real time. Included the mandatory five-factor framework from Article 27. Had not been updated since October 2019.

  • SOR Configuration Document (v2, March 2020): A technical specification showing the SOR vendor's configuration. The SOR was configured to route equity orders to three prioritised venues: XLON (London Stock Exchange), BATE (CBOE Europe), and a third internal SI operated by Cornerstone's prime broker. Routing logic: XLON first for any order under 50,000 shares; XLON then BATE for orders 50,000–200,000 shares; XLON, BATE, then internal SI for orders over 200,000 shares.

  • RTS 28 Report (2021 data, published July 2022): Listed XLON as the primary venue for all equity instrument classes, with BATE as secondary. No venue quality metrics. A brief narrative stating that "the firm's SOR was configured to achieve best execution across listed venues."

  • Execution Quality Review (Q4 2022): A two-page document summarising the number of equity orders executed and confirming that the SOR was "operational and functioning as configured."

The Gaps — Initial Assessment

By the end of week two, Rafael had identified five material gaps:

Gap 1: Policy obsolescence. The execution policy had not been updated since October 2019. In the three years since then: (a) Cornerstone had connected to Euronext Optiq and Aquis Exchange, adding two venues not mentioned in the policy; (b) the UK had left the EU's single market and UK MiFID II had diverged materially from EU MiFID II; (c) Cornerstone's SOR had been reconfigured twice. The policy did not reflect operational reality.

Gap 2: Single-venue concentration for small orders. The SOR configuration showed that all orders under 50,000 shares were routed exclusively to XLON, with no cross-venue price comparison and no documentation explaining why XLON consistently offered best execution for this order size. Rafael pulled three months of execution data: 73% of equity orders by count were below 50,000 shares. These had all gone to XLON.

Gap 3: No retrospective execution quality analysis. The Q4 2022 "execution quality review" confirmed the SOR was operational — it said nothing about whether execution quality was actually being achieved. There was no comparison of Cornerstone's execution prices against arrival mid, against VWAP, or against alternative venue prices. There was no exception process. No one was monitoring whether the SOR was actually achieving best execution or merely being technically operational.

Gap 4: RTS 28 late publication. The 2021 report was published in July 2022 — three months late. When Rafael asked why, the answer was disheartening: no one owned the process. Compliance believed that a business analyst in the trading technology team was responsible; trading technology believed compliance owned it. In practice, a junior analyst had assembled the data from three spreadsheets in June and emailed it to the head of compliance, who had it reviewed and published in July.

Gap 5: UK-EU regulatory divergence not addressed. Cornerstone UK's execution policy made no mention of UK MiFID II. It referenced EU MiFID II throughout and had been updated in 2019, before Brexit took effect. Cornerstone's Frankfurt entity was subject to EU MiFID II; Cornerstone UK was subject to UK MiFID II. The SOR configuration and execution policy did not differentiate between the two regulatory regimes. The UK Wholesale Markets Review's changes to the transparency waiver framework (particularly the 7.5% single volume cap replacing the EU's DVC) were unknown to the compliance team.

Rafael presented these findings to Fiona Mackenzie in week three.

"The good news," he said, "is that none of these are enforcement-level failures by themselves. The SOR was operational. You did publish the RTS 28 — late, but published. The policy was structurally sound. What we have is a firm that built a compliant framework in 2018-2019 and then didn't maintain it."

"Is that what the FCA will see?" Fiona asked.

"The FCA will see five items in their questionnaire responses that don't match the operational reality. That's what we need to fix. We have forty-five days."

Phase 2: Remediation Programme (Weeks 4–16)

Rafael designed a six-stream remediation programme, working in parallel across multiple workstreams.

Stream 1: Execution Policy Overhaul

Rafael engaged a regulatory counsel to lead the policy rewrite, working from a red-line of the 2019 document. Key changes:

  • Venue universe updated: All nine connected venues listed, with MIC codes, asset classes supported, and the regulatory regime applicable to each (UK vs. EU).
  • UK-EU distinction introduced: A new section explicitly addressed the bifurcated compliance framework: orders from Cornerstone UK Ltd are subject to UK MiFID II; orders from Cornerstone GmbH are subject to EU MiFID II. The policy described how the SOR respected this distinction in order routing.
  • Five-factor weighting by order type: The policy introduced a formal weighting matrix: for retail equity orders under 50,000 shares, price is the primary factor; for institutional orders 50,000–200,000 shares, a combination of price, cost, and speed; for large orders over 200,000 shares, size and likelihood of execution become co-primary factors.
  • Annual review obligation formalised: The policy assigned ownership of the annual review to the CCO, with a calendar reminder and a governance template for the sign-off paper.

The revised policy was reviewed by legal counsel, signed off by the CEO of Cornerstone UK Ltd, and submitted to the FCA as part of the thematic review response.

Stream 2: SOR Configuration and Venue Analysis

Rafael commissioned a three-month retrospective analysis of Cornerstone's equity executions using the firm's execution data and market data from a third-party provider. The analysis compared Cornerstone's execution prices against:

  • Arrival mid-price (implementation shortfall)
  • Market VWAP for the execution period
  • Best Available Quote (BAQ) on alternative venues at the time of execution

Key findings from the retrospective:

For orders under 50,000 shares in FTSE 100 stocks, XLON had in fact offered the best or equal-best price in 91% of cases during the analysis period. The single-venue routing for small orders was defensible — but it had never been documented and no one had checked.

For orders under 50,000 shares in mid-cap and small-cap equities, the picture was different: BATE and Aquis Exchange offered a better bid-ask spread than XLON in 23% of cases. The SOR's XLON-only routing for small orders was costing institutional clients a measurable amount — approximately 2.1 basis points on average for affected mid-cap trades.

Rafael recommended two SOR changes: (a) extend multi-venue sweeping to all orders regardless of size (the 50,000-share threshold for multi-venue routing was removed); (b) add Aquis Exchange to the routing priority list for mid-cap equities.

The SOR vendor implemented these changes within two weeks. Cornerstone's technology team updated the SOR Configuration Document.

Stream 3: Execution Quality Monitoring Framework

Rafael designed a monitoring framework with three components:

Daily exception report: Generated automatically from the execution management system. Flagged any execution where arrival price slippage exceeded 15 basis points (equities, liquid) or 25 basis points (equities, mid/small-cap). Each exception was reviewed by a designated senior trader the following morning, with a documented explanation uploaded to the compliance management system.

Monthly venue quality review: A dashboard comparing execution quality across venues for the prior month, using the BestExecutionAnalyzer methodology (arrival slippage, VWAP slippage, fill rate, execution duration). The head of trading and the CCO reviewed and signed off monthly. The review tracked whether SOR changes were improving execution quality as expected.

Annual execution policy review: A formal governance process: the head of trading prepared a paper summarising the year's execution quality data, proposed any SOR configuration changes, and recommended whether the execution policy required updating. The paper went to the Cornerstone UK board for sign-off.

Stream 4: RTS 28 Process Remediation

Rafael created a formal RTS 28 production process with clear ownership:

  • Owner: Director of Compliance Operations (named individual)
  • Inputs: Trading technology team provides execution data extract by 15 January; reference data team provides venue classification by 20 January; compliance operations assembles and validates report by 31 March; Legal reviews by 15 April; CCO signs off by 20 April; published by 30 April

A detailed task list with named owners and calendar reminders was embedded in the firm's compliance management system. The RTS 28 for 2022 data (published as part of the remediation) was completed and published in April 2023, on time.

Stream 5: UK-EU Regulatory Tracking

Rafael recommended that Cornerstone subscribe to a regulatory horizon-scanning service (two products were evaluated: a major law firm's MiFID tracker and ESMA's own public consultation register). The CCO's direct report was assigned responsibility for reviewing UK MiFID II and EU MiFID II updates quarterly and flagging material divergences to the execution policy owner.

A brief training session was conducted for the trading and compliance teams on the current state of UK-EU MiFID II divergence, covering: the single volume cap vs. DVC; the suspended RTS 27; the UK Share Trading Obligation framework; and MIFIDPRU.

Stream 6: FCA Response Package

Rafael and Fiona worked jointly on the FCA response document. The response:

  • Acknowledged the five gaps identified in the assessment
  • Provided the revised execution policy, SOR documentation, and monitoring framework as attachments
  • Provided the retrospective execution quality analysis, including the finding on mid-cap small orders and the SOR changes made
  • Explained the RTS 28 late publication (process gap, now remediated) and provided evidence of the revised process
  • Confirmed that the firm had reviewed the UK Wholesale Markets Review outcomes and that the execution policy had been updated accordingly

The response was submitted within the sixty-day window.

Phase 3: FCA Outcome and Lessons Learned (Weeks 17–28)

The FCA's Response

The FCA issued its thematic review outcome letter to Cornerstone in June 2023. The letter noted:

"The firm provided a comprehensive and substantive response to the FCA's information request. The execution quality retrospective and the associated SOR amendments demonstrated a genuine commitment to identifying and addressing execution quality gaps. The revised governance framework for best execution monitoring addresses the FCA's concern about the absence of ongoing execution quality oversight. The FCA expects the firm to implement the annual review process as described and to provide evidence of the first annual review in Q2 2024."

No formal enforcement action was taken. No s.166 skilled person review was required. One of the other five firms in the thematic cohort received a private warning; another received a s.166 requirement.

Fiona received the letter on a Tuesday morning and forwarded it to Rafael with a single line: "We did it. Thank you."

Rafael's reply was characteristically direct: "The firm did the work. I just helped you see what needed doing."

Lessons Learned

Rafael documented the Cornerstone engagement (anonymised) as a case study for his consulting practice. His summary of lessons for any investment firm facing a best execution thematic review:

1. Policy is necessary but not sufficient. Regulators are no longer satisfied with a compliant-looking policy. They expect to see evidence that the policy is being followed. Firms must be able to produce execution quality data — not just SOR configuration documentation.

2. Retrospective analysis is the hardest part. The most valuable evidence Cornerstone produced was the three-month retrospective comparing execution quality against alternative venues. This required market data, internal execution data, and analytical capability that the firm did not have in-house. Building this capability before a review is preferable to assembling it under regulatory pressure.

3. Own the RTS 28 process. Late publication of the RTS 28 is a persistent compliance failure across the industry. The remedy is simple: assign clear ownership, build the production process into the compliance calendar, and treat it as a regulatory deadline like any other.

4. Brexit matters operationally. For firms with both UK and EU operations, the divergence between UK and EU MiFID II is not merely academic. Execution policies, SOR configurations, and regulatory horizon-scanning must address both regimes separately. Firms that have not updated their policies since 2019 or 2020 are operating with documents that do not reflect current UK regulatory requirements.

5. Small orders are not exempt from best execution. The FCA's concern about Cornerstone's single-venue routing for small orders reflects a broader regulatory expectation: best execution applies to every client order, not just large or difficult ones. Firms that apply multi-venue analysis only to orders above a size threshold need to justify that threshold explicitly.

Discussion Questions

  1. Cornerstone's SOR routing of all orders under 50,000 shares exclusively to XLON was found to be defensible for FTSE 100 stocks but problematic for mid-cap equities. What does this finding suggest about the appropriate granularity of best execution policies — should execution policies differentiate execution strategy by instrument liquidity band?

  2. Rafael designed a monitoring framework with daily, monthly, and annual review components. Evaluate whether this frequency is sufficient for a firm of Cornerstone's size and trading volume. What additional monitoring components would you recommend for a larger, more complex institution?

  3. The FCA chose not to take formal enforcement action against Cornerstone. What factors in Cornerstone's response likely contributed to this outcome? What would a less comprehensive response have risked?

  4. Cornerstone's Frankfurt entity (subject to EU MiFID II) and UK entity (subject to UK MiFID II) share an execution policy and SOR. Identify two specific areas where a unified policy and SOR may create compliance risk under one regime or the other, given current UK-EU MiFID II divergence.