2024-02-09 SEC Press pdf 215 KB 32,660 chars

In re Key Investment Services LLC

summary

Key Investment Services LLC and KeyBanc Capital Markets Inc. violated federal securities recordkeeping rules by failing to preserve business-related off-channel communications on personal devices from 2019 to 2022, leading to a $10 million civil penalty and mandatory compliance reforms under a settled SEC order.

paragraph

The SEC found that KIS and KBCM failed to maintain and preserve business communications conducted via personal devices and unapproved platforms, violating Section 17(a) of the Exchange Act and Rule 17a-4(b)(4), as well as Section 204 of the Advisers Act and Rule 204-2(a)(7). These failures, which spanned senior employees and supervisors, also constituted inadequate supervision under Sections 15(b)(4)(E) and 203(e)(6). As part of a settlement, the firms agreed to a $10 million civil penalty, a cease-and-desist order, and must retain an independent compliance consultant to overhaul recordkeeping, supervision, and training systems while submitting ongoing reports to the SEC.

narrative

Key Investment Services LLC and KeyBanc Capital Markets Inc. violated federal securities recordkeeping rules by failing to preserve business-related communications conducted on personal devices and unapproved platforms from at least January 2019 through November 2022. These off-channel communications, which included text messages and other informal channels, pertained to broker-dealer activities and investment advice, and were widespread across all levels of the firms, including managing directors. The SEC determined that these failures violated Section 17(a) of the Exchange Act and Rule 17a-4(b)(4), as well as Section 204 of the Advisers Act and Rule 204-2(a)(7), and also constituted inadequate supervision under Sections 15(b)(4)(E) and 203(e)(6). The misconduct was uncovered during a risk-based SEC initiative targeting off-channel communications, and the firms’ recordkeeping lapses likely hindered the Commission’s ability to investigate securities violations. In settlement, KIS and KBCM consented to a cease-and-desist order, agreed to pay a joint $10 million civil penalty, and committed to comprehensive remediation, including retaining an independent compliance consultant to review and improve policies, surveillance, and training within 90 days of the consultant’s report. They must also conduct internal audits, preserve records for five to six years, report employee discipline to the SEC within 48 hours or 10 days, and certify full compliance within 60 days of completing all undertakings, with no termination of remediation without SEC approval.

Enriched metadata

Scheme
non-corporate (97%)
Outcome
charged
Civil penalty
$10,000,000
Classified non-corporate(confidence 97%). No EDGAR filing fingerprint (criminal/DOJ-side scheme). detection rule →
Statutes
31 U.S.C. § 3717SECTIONS 15(b) AND 21C OF THE SECURITIES EXCHANGE ACTSECTIONS 15(b) AND 21C OF THE SECURITIES EXCHANGE ACTSECTIONS 203(e) AND 203(k) OF THE INVESTMENT ADVISERS ACTSECTIONS 203(e) AND 203(k) OF THE INVESTMENT ADVISERS ACTRule 17a-4(b)Rule 204-2(a)Rule 17a-4Rule 204-2Rule 17a-4(f)
Parties
Securities and Exchange CommissionKey Investment Services LLCKeyBanc Capital Markets Inc.
Keywords
kiskbcmcompliance consultantcommissioncompliancecommunicationskbcm shallshallconsultantpersonal devicescommission staffexchangeinvestmentadviserspolicies procedures

Extracted insights

Dollar amounts 1
  • $10.00M $10,000,000 $10M–$100M
Triples 9
  • Commission deems it appropriate public administrative and cease-and-desist proceedings be instituted
  • Respondents submitted Offers of Settlement
  • Commission determined to accept the Offers of Settlement
  • Respondents admit the facts set forth in Section III
  • Respondents acknowledge that their conduct violated the federal securities laws
  • Respondents consent to the entry of this Order
  • Commission finds that KIS and KBCM employees failed to adhere to recordkeeping requirements
  • Employees sent and received off-channel communications
  • Respondents did not maintain or preserve the substantial majority of these written communications
Text layers
Extracted body text (32,660c)

   
   
 
 
UNITED STATES OF AMERICA 
 Before the 
 SECURITIES AND EXCHANGE COMMISSION 
 
SECURITIES EXCHANGE ACT OF 1934 
Release No. 99500 / February 9, 2024 
 
INVESTMENT ADVISERS ACT OF 1940 
Release No. 6549 / February 9, 2024 
 
ADMINISTRATIVE PROCEEDING 
File No. 3-21849 
 
 
In the Matter of 
 
Key Investment Services LLC, 
and  
KeyBanc Capital Markets Inc., 
 
Respondents. 
ORDER INSTITUTING ADMINISTRATIVE 
AND CEASE-AND-DESIST PROCEEDINGS, 
PURSUANT TO SECTIONS 15(b) AND 21C 
OF THE SECURITIES EXCHANGE ACT OF 
1934 AND SECTIONS 203(e) AND 203(k) OF 
THE INVESTMENT ADVISERS ACT OF 
1940, MAKING FINDINGS, AND IMPOSING 
REMEDIAL SANCTIONS AND A CEASE-
AND-DESIST ORDER 
 
 
I. 
 The Securities and Exchange Commission (“Commission”) deems it appropriate and in 
the public interest that public administrative and cease-and-desist proceedings be, and hereby 
are, instituted pursuant to Sections 15(b) and 21C of the Securities Exchange Act of 1934 
(“Exchange Act”) against Key Investment Services LLC (“KIS”) and KeyBanc Capital 
Markets Inc. (“KBCM”) and Sections 203(e) and 203(k) of the Investment Advisers Act of 1940 
(“Advisers Act”) against KIS (collectively “Respondents”). 
 
II. 
 In anticipation of the institution of these proceedings, Respondents have submitted Offers 
of Settlement (“Offers”) that the Commission has determined to accept.  Respondents admit the 
facts set forth in Section III below, acknowledge that their conduct violated the federal securities 
laws, admit the Commission’s jurisdiction over them and the subject matter of these proceedings, 
and consent to the entry of this Order Instituting Administrative and Cease-and-Desist 
Proceedings Pursuant to Sections 15(b) and 21C of the Securities Exchange Act of 1934 and 
Sections 203(e) and 203(k) of the Investment Advisers Act of 1940, Making Findings, and 
Imposing Remedial Sanctions and a Cease-and-Desist Order (“Order”), as set forth below.   
 

 
 
2 
 
III. 
 On the basis of this Order and Respondents’ Offers, the Commission finds
1
 that 
 
Summary 
1. The federal securities laws impose recordkeeping requirements on broker-dealers 
and registered investment advisers to ensure that they responsibly discharge their crucial role in 
our markets.  The Commission has long said that compliance with these requirements is essential 
to investor protection and the Commission’s efforts to further its mandate of protecting investors, 
maintaining fair, orderly, and efficient markets, and facilitating capital formation. 
2. These proceedings arise out of the widespread and longstanding failure of KIS 
and KBCM employees throughout the firms, including at senior levels, to adhere to certain of 
these essential requirements and the firms’ own policies.  Using their personal devices, these 
employees communicated both internally and externally by personal text messages (“off-channel 
communications”). 
3. From at least January 2019, KIS and KBCM employees sent and received off-
channel communications that related to the broker-dealer businesses operated by KIS and 
KBCM, and with respect to KIS’s investment advisory businesses related to recommendations 
made or proposed to be made and advice given or proposed to be given.  Respondents did not 
maintain or preserve the substantial majority of these written communications.  Respondents’ 
failures were firm-wide and involved employees at various levels of authority.  As a result, KIS 
and KBCM violated Section 17(a) of the Exchange Act and Rule 17a-4(b)(4) thereunder and KIS 
violated Section 204 of the Advisers Act and Rule 204-2(a)(7) thereunder. 
4. KIS’s and KBCM’s supervisors, who were responsible for supervising junior 
employees, routinely communicated off-channel using their personal devices.  In fact, managing 
directors themselves failed to comply with KIS and KBCM’s policies by communicating using 
non-KIS or KBCM approved methods on their personal devices about KIS’s or KBCM’s broker-
dealer and/or KIS’s investment adviser businesses, as applicable.  
5. KIS’s and KBCM’s widespread failure to implement their policies and procedures 
that prohibit such communications led to their failure to reasonably supervise their employees 
within the meaning of Section 15(b)(4)(E) of the Exchange Act with respect to KIS and KBCM, 
and Section 203(e)(6) of the Advisers Act with respect to KIS.  
6. During the time period that KIS and KBCM failed to maintain and preserve off-
channel communications that their employees sent and received related to KIS’s and KBCM’s 
broker-dealer and KIS’s investment adviser, KIS and KBCM received and responded to 
Commission subpoenas for documents and/or records requests in Commission investigations.  As 
a result, KIS’s and KBCM’s recordkeeping failures likely impacted the Commission’s ability to 
 
1
  The findings herein are made pursuant to Respondents’ Offers of Settlement and are not 
binding on any other person or entity in this or any other proceeding.  
 

 
 
3 
 
carry out its regulatory functions and investigate violations of the federal securities laws across 
these investigations.   
7. Commission staff uncovered KIS and KBCM misconduct after commencing a 
risk-based initiative to investigate the use of off-channel and unpreserved communications at 
broker-dealers.  KIS and KBCM have initiated a review of their recordkeeping failures and 
begun a program of remediation.  As set forth in the Undertakings below, KIS and KBCM will 
retain an independent compliance consultant to review and assess KIS’s and KBCM’s remedial 
steps relating to KIS’s and KBCM’s recordkeeping practices, policies and procedures, related 
supervisory practices, and employment actions. 
Respondents 
8. KIS is an Ohio limited liability company with its principal office in Brooklyn, 
Ohio, and is registered with the Commission as a broker-dealer and investment adviser. 
9. KBCM is an Ohio corporation with its principal office in Cleveland, Ohio, and is 
registered with the Commission as a broker-dealer. 
Recordkeeping Requirements under the Exchange and Advisers Acts 
10. Section 17(a)(1) of the Exchange Act and Section 204 of the Advisers Act 
authorize the Commission to issue rules requiring, respectively, broker-dealers and investment 
advisers to make and keep for prescribed periods, and furnish copies of, such records as 
necessary or appropriate in the public interest, for the protection of investors or otherwise in 
furtherance of the purposes of the Exchange Act and the Advisers Act. 
11. The Commission adopted Rule 17a-4 under the Exchange Act and Rule 204-2 
under the Advisers Act pursuant to this authority.  These rules specify the manner and length of 
time that the records created in accordance with Commission rules, and certain other records 
produced by broker-dealers, or investment advisers, must be maintained and produced promptly 
to Commission representatives. 
12. The rules adopted under Section 17(a)(1) of the Exchange Act, including Rule 
17a-4(b)(4), require that broker-dealers preserve in an easily accessible place originals of all 
communications received and copies of all communications sent relating to the firm’s business 
as such.  These rules impose minimum recordkeeping requirements that are based on standards a 
prudent broker-dealer should follow in the normal course of business.  
13. The rules adopted under Advisers Act Section 204, including Advisers Act Rule 
204-2(a)(7), require that investment advisers preserve in an easily accessible place originals of all 
communications received and copies of all written communications sent relating to among other 
things, any recommendation made or proposed to be made and any advice given or proposed to be 
given. 
14. The Commission previously has stated that these and other recordkeeping 
requirements “are an integral part of the investor protection function of the Commission, and 
other securities regulators, in that the preserved records are the primary means of monitoring 

 
 
4 
 
compliance with applicable securities laws, including antifraud provisions and financial 
responsibility standards.”  Commission Guidance to Broker-Dealers on the Use of Electronic 
Storage Media under the Electronic Signatures in Global and National Commerce Act of 2000 
with Respect to Rule 17a-4(f), 17 C.F.R. Part 241, Exchange Act Rel. No. 44238 (May 1, 2001). 
KIS’s  an
d KBCM’s Policies and Procedures 
15. KIS and KBCM maintained certain policies and procedures designed to ensure 
the retention of business-related records, including electronic communications, in compliance 
with the relevant recordkeeping provisions.   
16. KIS’s and KBCM’s employees were advised that the use of unapproved 
electronic communications methods, including on their personal devices, was not permitted, and 
they should not use personal email, chats text messaging, or social media applications for 
business purposes, or forward work-related communications to unapproved applications on their 
personal devices.  
17. Messages sent through KIS’s and KBCM’s approved communications methods 
were monitored, subject to review, and, when appropriate, archived.  Messages sent through 
unapproved communications methods, such as unapproved applications on personal devices, 
were not monitored, subject to review or archived. 
18. KIS’s and KBCM’s policies were designed to address supervisors’ supervision of 
employees’ training in KIS’s and KBCM’s communications policies and adherence to KIS’s and 
KBCM’s respective books and recordkeeping requirements.  Supervisory policies notified 
employees that electronic communications were subject to surveillance by KIS or KBCM.  KIS 
and KBCM had procedures for all employees, including supervisors, requiring annual self-
attestations of compliance.  KIS and KBCM also issued periodic policy reminders that covered a 
variety of topics such as electronic communications and social media policies. 
19. KIS and KBCM, however, failed to implement a system of follow-up and review 
to determine that supervisors were reasonably following KIS’s or KBCM’s policies.  While 
permitting employees to use approved communications methods, including on personal phones, 
for business communications, KIS and KBCM failed to implement sufficient monitoring to 
assure that their recordkeeping and communications policies were being followed.  
KIS and KBCM’s Recordkeeping Failures Across Their Businesses 
 
20. In September 2021, the Commission staff commenced a risk-based initiative to 
investigate whether broker-dealers were properly retaining business-related messages sent and 
received on personal devices.  KIS and KBCM cooperated with the investigation by voluntarily 
gathering and reviewing communications from the personal devices of a sampling of senior 
personnel.  These personnel included senior leadership at both KIS and KBCM, including KIS 
advisory personnel and individuals in fixed income sales and trading, public sector and public 
finance, investment banking, and institutional equities at KBCM. 

 
 
5 
 
21. The Commission staff’s investigation uncovered pervasive off-channel 
communications at various seniority levels of KIS’ broker-dealer and investment adviser and 
KBCM’s broker-dealer.  At the Staff’s request, KIS and KBCM reviewed off-channel 
communications data from a sampling of their personnel and found that certain of the individuals 
had engaged in at least some level of off-channel communications activity.  Overall, personnel 
sent and received numerous off-channel communications, involving other KIS or KBCM more 
junior personnel, KIS’s and KBCM’s broker-dealer customers and KIS’s investment advisory 
clients, and other participants in the securities industry.  Within KIS and KBCM, some senior 
leadership participated in off-channel communications. 
22. From at least January 2019, KIS and KBCM personnel sent and received off-
channel messages that concerned the businesses of the broker dealers.  During this period, KIS’s 
investment adviser personnel sent and received off-channel messages related to, among other 
things, providing and recommending investment advice to clients and conducted internal 
discussions with other KIS investment adviser personnel.   
23. For example, from December 2020 through November 2021, a Managing Director 
in the Investment Banking group at KBCM exchanged numerous off-channel business-related 
messages with several KBCM colleagues, including other Managing Directors, as well as 
personnel at other financial services firms and market participants.  These messages related to 
the broker-dealer’s business as such. 
24. In another example, between March 2021 and November 2021, a Regional 
Executive and Wealth Market Leader at KIS exchanged a number of off-channel messages with 
several KIS colleagues relating to among other things, the broker-dealer’s business as such and 
investment advice provided to advisory clients. 
KIS’s and KBCM’s Failure to Preserve Required Records Potentially 
Compromised and Delayed Commission Matters 
25. Between January 2019 and November 2022, KIS and KBCM received and 
responded to Commission subpoenas for documents and/or records requests in Commission 
investigations.  By failing to maintain and preserve required records relating to their businesses, 
KIS and KBCM likely deprived the Commission of these off-channel communications in various 
investigations. 
KIS’s  and KBCM’s Violations and Failure to Supervise 
26. As a result of the conduct described above, from at least January 2019 through the 
date of this Order, KIS and KBCM willfully
2
 violated Section 17(a) of the Exchange Act and 
 
2
  “Willfully,” for purposes of imposing relief under Section 15(b) of the Exchange Act and 
Section 203(e) of the Advisers Act “‘means no more than that the person charged with the duty 
knows what he is doing.’”  See Wonsover v. SEC, 205 F.3d 408, 414 (D.C. Cir 2000) (quoting 
Hughes v. SEC, 174 F.2d 969, 977 (D.C. Cir. 1949)).  There is no requirement that the actor 
“also be aware that he is violating one of the Rules or Acts.”  Tager v. SEC, 344 F.2d 5, 8 (2d 
 

 
 
6 
 
Rule 17a-4(b)(4) thereunder, which require broker-dealers to preserve for at least three years 
originals of all communications received and copies of all communications sent relating to its 
business as such.   
27. As a result of the conduct described above, from at least January 2019 through the 
date of this Order, KIS willfully violated Section 204 of the Advisers Act and Rule 204-2(a)(7) 
thereunder, which require investment advisers to preserve in an easily accessible place originals of 
all    written communications received and copies of all    written communications sent relating to, 
among other things, any recommendation made or proposed to be made and any advice given or 
proposed to be given. 
28. As a result of the conduct described above, KIS and KBCM failed reasonably to 
supervise their employees with a view to preventing or detecting certain of their employees’ 
aiding and abetting violations of Section 17(a) of the Exchange Act and Rule 17a-4(b)(4) 
thereunder, within the meaning of Section 15(b)(4)(E) of the Exchange Act.  
29. As a result of the conduct described above, KIS failed reasonably to supervise its 
employees with a view to preventing or detecting certain of its employees’ aiding and abetting 
violations of Section 204 of the Advisers Act and Rule 204-2(a)(7) thereunder, within the 
meaning of Section 203(e)(6) of the Advisers Act. 
KIS’s  and KBCM’s Remedial Efforts 
30. In determining to accept the Offers, the Commission considered steps promptly 
undertaken by KIS and KBCM, in part before the Commission’s inquiry, and cooperation afforded 
the Commission staff. 
Undertakings 
31. Prior to this action, Respondents enhanced their policies and procedures, and 
increased training concerning the use of approved communications methods, including on 
personal devices and began implementing changes to the technology available to employees.  In 
addition, Respondents have undertaken to: 
 Independent Compliance Consultant. 
a.  KIS and KBCM shall each retain, within thirty (30) days of the entry of this 
Order, the services of an independent compliance consultant (“Compliance Consultant”) 
that is not unacceptable to the Commission staff.  The Compliance Consultant’s 
compensation and expenses shall be borne exclusively by KIS and KBCM. 
 
 
Cir. 1965).  The decision in The Robare Group, Ltd. v. SEC, which construed the term 
“willfully” for purposes of a differently structured statutory provision, does not alter that 
standard.  922 F.3d 468, 478-79 (D.C. Cir. 2019) (setting forth the showing required to establish 
that a person has “willfully omit[ted]” material information from a required disclosure in 
violation of Section 207 of the Advisers Act). 

 
 
7 
 
b.  KIS and KBCM will oversee the work of the Compliance Consultant. 
 
c.  KIS and KBCM shall provide to the Commission staff, within sixty (60) days 
of the entry of this Order, a copy of the engagement letter detailing the Compliance 
Consultant’s responsibilities, which shall include a comprehensive compliance review as 
described below.  KIS and KBCM shall require that, within ninety (90) days of the date 
of the engagement letter, the Compliance Consultant conduct: 
 
i.  A comprehensive review of KIS’s and KBCM’s supervisory, 
compliance, and other policies and procedures designed to ensure that KIS’s and 
KBCM’s electronic communications, including those found on personal 
electronic devices, including without limitation, cellular phones (“Personal 
Devices”), are preserved in accordance with the requirements of the federal 
securities laws. 
 
ii.  A comprehensive review of training conducted by KIS and KBCM to 
ensure KIS’s and KBCM’s personnel are complying with the requirements 
regarding the preservation of electronic communications, including those found 
on Personal Devices, in accordance with the requirements of the federal securities 
laws, including by ensuring that KIS’s and KBCM’s personnel certify in writing 
on a quarterly basis that they are complying with preservation requirements.  
 
iii.  An assessment of the surveillance program measures implemented by 
KIS and KBCM to ensure compliance, on an ongoing basis, with the requirements 
found in the federal securities laws to preserve electronic communications, 
including those found on Personal Devices. 
 
iv.  An assessment of the technological solutions that KIS and KBCM 
have begun implementing to meet the record retention requirements of the federal 
securities laws, including an assessment of the likelihood that KIS’s and KBCM’s 
personnel will use the technological solutions going forward and a review of the 
measures employed by KIS and KBCM to track employee usage of new 
technological solutions.  
 
v.  An assessment of the measures used by KIS and KBCM to prevent the 
use of unauthorized communications methods for business communications by 
employees.  This assessment should include, but not be limited to, a review of 
KIS’s and KBCM’s policies and procedures to ascertain if they provide for any 
significant technology and/or behavioral restrictions that help prevent the risk of 
the use of unapproved communications methods on Personal Devices (e.g., 
trading floor restrictions).   
 
vi.  A review of KIS’s and KBCM’s electronic communications 
surveillance routines to ensure that electronic communications through approved 
communications methods found on Personal Devices are incorporated into KIS’s 
and KBCM’s overall communications surveillance program.   

 
 
8 
 
 
vii.  A comprehensive review of the framework adopted by KIS and 
KBCM to address instances of non-compliance by KIS’s and KBCM’s employees 
with KIS’s and KBCM’s policies and procedures concerning the use of Personal 
Devices to communicate about KIS and KBCM business in the past.  This review 
shall include a survey of how KIS and KBCM determined which employees failed 
to comply with KIS’s and KBCM’s policies and procedures, the corrective action 
carried out, an evaluation of who violated policies and why, what penalties were 
imposed, and whether penalties were handed out consistently across business 
lines and seniority levels.   
 
d. KIS and KBCM shall require that, within forty-five (45) days after completion 
of the review set forth in sub-paragraphs 31.c.i. through c.vii. above, the Compliance 
Consultant shall submit a detailed written report of its findings to KIS and KBCM and to 
the Commission staff (the “Report”).  KIS and KBCM shall require that the Report 
include a description of the review performed, the names of the individuals who 
performed the review, the conclusions reached, the Compliance Consultant’s 
recommendations for changes in or improvements to KIS’s and KBCM’s policies and 
procedures, and a summary of the plan for implementing the recommended changes in or 
improvements to KIS’s and KBCM’s policies and procedures. 
 
e.  KIS and KBCM shall adopt all recommendations contained in the Report 
within ninety (90) days of the date of the Report; provided, however, that within forty-
five (45) days after the date of the Report, KIS or KBCM shall advise the Compliance 
Consultant and the Commission staff in writing of any recommendations that KIS or 
KBCM consider to be unduly burdensome, impractical, or inappropriate.  With respect to 
any recommendation that KIS or KBCM considers unduly burdensome, impractical, or 
inappropriate, KIS or KBCM need not adopt such recommendation at that time, but shall 
propose in writing an alternative policy, procedure, or disclosure designed to achieve the 
same objective or purpose. 
 
f.  As to any recommendation concerning KIS’s or KBCM’s policies or 
procedures on which KIS or KBCM and the Compliance Consultant do not agree, KIS or 
KBCM and the Compliance Consultant shall attempt in good faith to reach an agreement 
within sixty (60) days after the date of the Report.  Within fifteen (15) days after the 
conclusion of the discussion and evaluation by KIS or KBCM and the Compliance 
Consultant, KIS or KBCM shall require that the Compliance Consultant inform KIS or 
KBCM and the Commission staff in writing of the Compliance Consultant’s final 
determination concerning any recommendation that KIS or KBCM considers to be 
unduly burdensome, impractical, or inappropriate.  KIS and KBCM shall abide by the 
determinations of the Compliance Consultant and, within sixty (60) days after final 
agreement between KIS and KBCM and the Compliance Consultant or final 
determination by the Compliance Consultant, whichever occurs first, KIS and KBCM 
shall adopt and implement all of the recommendations that the Compliance Consultant 
deems appropriate. 
 

 
 
9 
 
g.  KIS and KBCM shall cooperate fully with the Compliance Consultant and 
shall provide the Compliance Consultant with access to such of KIS’s and KBCM’s files, 
books, records, and personnel as are reasonably requested by the Compliance Consultant 
for review. 
 
h. KIS and KBCM shall not have the authority to terminate the Compliance 
Consultant or substitute another compliance consultant for the initial Compliance 
Consultant, without the prior written approval of the Commission staff.  KIS and KBCM 
shall compensate the Compliance Consultant and persons engaged to assist the 
Compliance Consultant for services rendered under this Order at their reasonable and 
customary rates. 
 
i.  For the period of engagement and for a period of two years from completion of 
the engagement, KIS and KBCM shall not (i) retain the Compliance Consultant for any 
other professional services outside of the services described in this Order; (ii) enter into 
any other professional relationship with the Compliance Consultant, including any 
employment, consultant, attorney-client, auditing or other professional relationship; or 
(iii) enter, without prior written consent of the Commission staff, into any such 
professional relationship with any of the Compliance Consultant’s present or former 
affiliates, employers, directors, officers, employees, or agents acting in their capacity as 
such. 
 
j.  The Report submitted by the Compliance Consultant will likely include 
confidential financial, proprietary, competitive business or commercial information.  
Public disclosure of the Report could discourage cooperation, impede pending or 
potential government investigations or undermine the objectives of the reporting 
requirement.  For these reasons, among others, the Report and the contents thereof are 
intended to remain and shall remain non-public, except (1) pursuant to court order, (2) as 
agreed to by the parties in writing, (3) to the extent that the Commission determines in its 
sole discretion that disclosure would be in furtherance of the Commission’s discharge of 
its duties and responsibilities, or (4) as otherwise required by law. 
 
32.   One-Year Evaluation.  KIS and KBCM shall each require the Compliance 
Consultant to assess KIS’s and KBCM’s programs for the preservation, as required under the 
federal securities laws, of electronic communications, including those found on Personal 
Devices, commencing one year after submitting the Report required by Paragraph 31.d above.  
KIS and KBCM shall require this review to evaluate KIS’s and KBCM’s progress in the areas 
described in Paragraph 31.c.i-vii above.  After this review, KIS and KBCM shall require the 
Compliance Consultant to submit a report (the “One Year Report”) to each of KIS and KBCM 
and the Commission staff and shall ensure that the One Year Report includes an updated 
assessment of KIS’s and KBCM’s policies and procedures with regard to the preservation of 
electronic communications (including those found on Personal Devices), training, surveillance 
programs, and technological solutions implemented in the prior year period.  
 
33. Reporting Discipline Imposed.  For two years following the entry of this Order, 
KIS and KBCM shall notify the Commission staff as follows upon the imposition of any discipline 

 
 
10 
 
imposed by KIS or KBCM, including, but not limited to, written warnings, loss of any pay, bonus, 
or incentive compensation, or the termination of employment, with respect to any employee found 
to have violated KIS’s or KBCM’s policies and procedures concerning the preservation of 
electronic communications, including those found on Personal Devices: at least 48 hours before the 
filing of a Form U-5, or within ten (10) days of the imposition of other discipline.    
 
34  .  Internal Audit.  In addition to the Compliance Consultant’s review and issuance of 
the One Year Report, KIS and KBCM will each also have their respective Internal Audit functions 
conduct a separate audit(s) to assess KIS’s and KBCM’s progress in the areas described in 
Paragraph 31.c.i-vii above.  After completion of this audit(s), KIS and KBCM shall ensure that 
Internal Audit submits a report to each of KIS and KBCM and to the Commission staff. 
 
35. Recordkeeping.  KIS and KBCM shall each preserve, for a period of not less than 
six (6) years from the end of the fiscal year last used, the first two (2) years in an easily 
accessible place, any record of compliance with these undertakings.  KIS shall also 
preserve any 
record of compliance with these undertakings in an easily accessible place for a period of not less 
than five (5) years from the end of the fiscal year during which the entry was made on such record, 
the first two (2) years in an appropriate office of KIS. 
 
 
36. Deadlines.  For good cause shown, the Commission staff may extend any of the 
procedural dates relating to the undertakings.  Deadlines for procedural dates shall be counted in 
calendar days, except that if the last day falls on a weekend or federal holiday, the next business 
day shall be considered to be the last day. 
37. C
ertification.  KIS and KBCM shall each certify, in writing, compliance with the 
undertakings set forth above.  The certification shall identify the undertakings, provide written 
evidence of compliance in the form of a narrative, and be supported by exhibits sufficient to 
demonstrate compliance.  The Commission staff may make reasonable requests for further 
evidence of compliance, and Respondents agree to provide such evidence.  The certifications and 
supporting material shall be submitted to Amy S. Cotter, Assistant Director, Division of 
Enforcement, Chicago Regional Office, Securities and Exchange Commission, 175 W. Jackson 
Blvd., Suite 1450, Chicago, IL 60604, or such other person as the Commission staff may request, 
with a copy to the Office of Chief Counsel of the Enforcement Division, no later than sixty (60) 
days from the date of the completion of the undertakings. 
 
IV. 
 In view of the foregoing, the Commission deems it appropriate and in the public interest 
to impose the sanctions agreed to in Respondents’ Offers. 
 
 Accordingly, pursuant to Sections 15(b) and 21C of the Exchange Act as to KIS and 
KBCM and Sections 203(e) and 203(k) of the Advisers Act as to KIS, it is hereby ORDERED 
that: 
 

 
 
11 
 
A. KIS and KBCM cease and desist from committing or causing any violations and 
any future violations of Section 17(a) of the Exchange Act and Rule 17a-4 
thereunder. 
 
B. KIS cease and desist from committing or causing any violations and any future 
violations of Section 204 of the Advisers Act and Rule 204-2 thereunder. 
 
C. Respondents are censured.  
 
D. Respondents shall comply with the undertakings enumerated in paragraphs 31 to 
37 above. 
  
 E. Respondents shall, jointly and severally, within 14 days of the entry of this Order, 
pay a civil money penalty in the amount of $10,000,000 to the Securities and 
Exchange Commission for transfer to the general fund of the United States 
Treasury, subject to Exchange Act Section 21F(g)(3).  If timely payment is not 
made, additional interest shall accrue pursuant to 31 U.S.C. § 3717.   
 
 Payment must be made in one of the following ways:   
 
(1) Respondents may transmit payment electronically to the Commission, 
which will provide detailed ACH transfer/Fedwire instructions upon 
request;  
 
(2) Respondents may make direct payment from a bank account via Pay.gov 
through the SEC website at http://www.sec.gov/about/offices/ofm.htm; or  
 
(3) Respondents may pay by certified check, bank cashier’s check, or United 
States postal money order, made payable to the Securities and Exchange 
Commission and hand-delivered or mailed to:  
 
Enterprise Services Center 
Accounts Receivable Branch 
HQ Bldg., Room 181, AMZ-341 
6500 South MacArthur Boulevard 
Oklahoma City, OK 73169 
 
Payments by check or money order must be accompanied by a cover letter identifying 
KIS and KBCM as the Respondents in these proceedings, and the file number of these 
proceedings; a copy of the cover letter and check or money order must be sent to Amy S. Cotter, 
Assistant Director, Division of Enforcement, Chicago Regional Office, Securities and Exchange 
Commission, 175 W. Jackson Blvd., Suite 1450, Chicago, IL 60604.   
 
 F. Amounts ordered to be paid as civil money penalties pursuant to this Order shall 
be treated as penalties paid to the government for all purposes, including all tax purposes.  To 
preserve the deterrent effect of the civil penalty, Respondents agree that in any Related Investor 

 
 
12 
 
Action, they shall not argue that they are entitled to, nor shall they benefit by, offset or reduction 
of any award of compensatory damages by the amount of any part of Respondents’ payment of a 
civil penalty in this action (“Penalty Offset”).  If the court in any Related Investor Action grants 
such a Penalty Offset, Respondents agree that they shall, within 30 days after entry of a final 
order granting the Penalty Offset, notify the Commission’s counsel in this action and pay the 
amount of the Penalty Offset to the Securities and Exchange Commission.  Such a payment shall 
not be deemed an additional civil penalty and shall not be deemed to change the amount of the 
civil penalty imposed in this proceeding.  For purposes of this paragraph, a “Related Investor 
Action” means a private damages action brought against Respondents by or on behalf of one or 
more investors based on substantially the same facts as alleged in the Order instituted by the 
Commission in this proceeding. 
 
 By the Commission. 
 
 
 
Vanessa A. Countryman 
       Secretary 
OCR text (33,247c · tika · 95% conf)
UNITED STATES OF AMERICA 
 Before the 
 SECURITIES AND EXCHANGE COMMISSION 
 
SECURITIES EXCHANGE ACT OF 1934 
Release No. 99500 / February 9, 2024 
 
INVESTMENT ADVISERS ACT OF 1940 
Release No. 6549 / February 9, 2024 
 
ADMINISTRATIVE PROCEEDING 
File No. 3-21849 
 
 
In the Matter of 
 

Key Investment Services LLC, 
and  
KeyBanc Capital Markets Inc., 

 
Respondents. 

ORDER INSTITUTING ADMINISTRATIVE 
AND CEASE-AND-DESIST PROCEEDINGS, 
PURSUANT TO SECTIONS 15(b) AND 21C 
OF THE SECURITIES EXCHANGE ACT OF 
1934 AND SECTIONS 203(e) AND 203(k) OF 
THE INVESTMENT ADVISERS ACT OF 
1940, MAKING FINDINGS, AND IMPOSING 
REMEDIAL SANCTIONS AND A CEASE-
AND-DESIST ORDER 

 
 

I. 

 The Securities and Exchange Commission (“Commission”) deems it appropriate and in 
the public interest that public administrative and cease-and-desist proceedings be, and hereby 
are, instituted pursuant to Sections 15(b) and 21C of the Securities Exchange Act of 1934 
(“Exchange Act”) against Key Investment Services LLC (“KIS”) and KeyBanc Capital 
Markets Inc. (“KBCM”) and Sections 203(e) and 203(k) of the Investment Advisers Act of 1940 
(“Advisers Act”) against KIS (collectively “Respondents”). 

 
II. 

 In anticipation of the institution of these proceedings, Respondents have submitted Offers 
of Settlement (“Offers”) that the Commission has determined to accept.  Respondents admit the 
facts set forth in Section III below, acknowledge that their conduct violated the federal securities 
laws, admit the Commission’s jurisdiction over them and the subject matter of these proceedings, 
and consent to the entry of this Order Instituting Administrative and Cease-and-Desist 
Proceedings Pursuant to Sections 15(b) and 21C of the Securities Exchange Act of 1934 and 
Sections 203(e) and 203(k) of the Investment Advisers Act of 1940, Making Findings, and 
Imposing Remedial Sanctions and a Cease-and-Desist Order (“Order”), as set forth below.   
 



 
 

2 
 

III. 

 On the basis of this Order and Respondents’ Offers, the Commission finds1 that 
 

Summary 

1. The federal securities laws impose recordkeeping requirements on broker-dealers 
and registered investment advisers to ensure that they responsibly discharge their crucial role in 
our markets.  The Commission has long said that compliance with these requirements is essential 
to investor protection and the Commission’s efforts to further its mandate of protecting investors, 
maintaining fair, orderly, and efficient markets, and facilitating capital formation. 

2. These proceedings arise out of the widespread and longstanding failure of KIS 
and KBCM employees throughout the firms, including at senior levels, to adhere to certain of 
these essential requirements and the firms’ own policies.  Using their personal devices, these 
employees communicated both internally and externally by personal text messages (“off-channel 
communications”). 

3. From at least January 2019, KIS and KBCM employees sent and received off-
channel communications that related to the broker-dealer businesses operated by KIS and 
KBCM, and with respect to KIS’s investment advisory businesses related to recommendations 
made or proposed to be made and advice given or proposed to be given.  Respondents did not 
maintain or preserve the substantial majority of these written communications.  Respondents’ 
failures were firm-wide and involved employees at various levels of authority.  As a result, KIS 
and KBCM violated Section 17(a) of the Exchange Act and Rule 17a-4(b)(4) thereunder and KIS 
violated Section 204 of the Advisers Act and Rule 204-2(a)(7) thereunder. 

4. KIS’s and KBCM’s supervisors, who were responsible for supervising junior 
employees, routinely communicated off-channel using their personal devices.  In fact, managing 
directors themselves failed to comply with KIS and KBCM’s policies by communicating using 
non-KIS or KBCM approved methods on their personal devices about KIS’s or KBCM’s broker-
dealer and/or KIS’s investment adviser businesses, as applicable.  

5. KIS’s and KBCM’s widespread failure to implement their policies and procedures 
that prohibit such communications led to their failure to reasonably supervise their employees 
within the meaning of Section 15(b)(4)(E) of the Exchange Act with respect to KIS and KBCM, 
and Section 203(e)(6) of the Advisers Act with respect to KIS.  

6. During the time period that KIS and KBCM failed to maintain and preserve off-
channel communications that their employees sent and received related to KIS’s and KBCM’s 
broker-dealer and KIS’s investment adviser, KIS and KBCM received and responded to 
Commission subpoenas for documents and/or records requests in Commission investigations.  As 
a result, KIS’s and KBCM’s recordkeeping failures likely impacted the Commission’s ability to 

 
1  The findings herein are made pursuant to Respondents’ Offers of Settlement and are not 
binding on any other person or entity in this or any other proceeding.  
 



 
 

3 
 

carry out its regulatory functions and investigate violations of the federal securities laws across 
these investigations.   

7. Commission staff uncovered KIS and KBCM misconduct after commencing a 
risk-based initiative to investigate the use of off-channel and unpreserved communications at 
broker-dealers.  KIS and KBCM have initiated a review of their recordkeeping failures and 
begun a program of remediation.  As set forth in the Undertakings below, KIS and KBCM will 
retain an independent compliance consultant to review and assess KIS’s and KBCM’s remedial 
steps relating to KIS’s and KBCM’s recordkeeping practices, policies and procedures, related 
supervisory practices, and employment actions. 

Respondents 

8. KIS is an Ohio limited liability company with its principal office in Brooklyn, 
Ohio, and is registered with the Commission as a broker-dealer and investment adviser. 

9. KBCM is an Ohio corporation with its principal office in Cleveland, Ohio, and is 
registered with the Commission as a broker-dealer. 

Recordkeeping Requirements under the Exchange and Advisers Acts 

10. Section 17(a)(1) of the Exchange Act and Section 204 of the Advisers Act 
authorize the Commission to issue rules requiring, respectively, broker-dealers and investment 
advisers to make and keep for prescribed periods, and furnish copies of, such records as 
necessary or appropriate in the public interest, for the protection of investors or otherwise in 
furtherance of the purposes of the Exchange Act and the Advisers Act. 

11. The Commission adopted Rule 17a-4 under the Exchange Act and Rule 204-2 
under the Advisers Act pursuant to this authority.  These rules specify the manner and length of 
time that the records created in accordance with Commission rules, and certain other records 
produced by broker-dealers, or investment advisers, must be maintained and produced promptly 
to Commission representatives. 

12. The rules adopted under Section 17(a)(1) of the Exchange Act, including Rule 
17a-4(b)(4), require that broker-dealers preserve in an easily accessible place originals of all 
communications received and copies of all communications sent relating to the firm’s business 
as such.  These rules impose minimum recordkeeping requirements that are based on standards a 
prudent broker-dealer should follow in the normal course of business.  

13. The rules adopted under Advisers Act Section 204, including Advisers Act Rule 
204-2(a)(7), require that investment advisers preserve in an easily accessible place originals of all 
communications received and copies of all written communications sent relating to among other 
things, any recommendation made or proposed to be made and any advice given or proposed to be 
given. 

14. The Commission previously has stated that these and other recordkeeping 
requirements “are an integral part of the investor protection function of the Commission, and 
other securities regulators, in that the preserved records are the primary means of monitoring 



 
 

4 
 

compliance with applicable securities laws, including antifraud provisions and financial 
responsibility standards.”  Commission Guidance to Broker-Dealers on the Use of Electronic 
Storage Media under the Electronic Signatures in Global and National Commerce Act of 2000 
with Respect to Rule 17a-4(f), 17 C.F.R. Part 241, Exchange Act Rel. No. 44238 (May 1, 2001). 

KIS’s and KBCM’s Policies and Procedures 

15. KIS and KBCM maintained certain policies and procedures designed to ensure 
the retention of business-related records, including electronic communications, in compliance 
with the relevant recordkeeping provisions.   

16. KIS’s and KBCM’s employees were advised that the use of unapproved 
electronic communications methods, including on their personal devices, was not permitted, and 
they should not use personal email, chats text messaging, or social media applications for 
business purposes, or forward work-related communications to unapproved applications on their 
personal devices.  

17. Messages sent through KIS’s and KBCM’s approved communications methods 
were monitored, subject to review, and, when appropriate, archived.  Messages sent through 
unapproved communications methods, such as unapproved applications on personal devices, 
were not monitored, subject to review or archived. 

18. KIS’s and KBCM’s policies were designed to address supervisors’ supervision of 
employees’ training in KIS’s and KBCM’s communications policies and adherence to KIS’s and 
KBCM’s respective books and recordkeeping requirements.  Supervisory policies notified 
employees that electronic communications were subject to surveillance by KIS or KBCM.  KIS 
and KBCM had procedures for all employees, including supervisors, requiring annual self-
attestations of compliance.  KIS and KBCM also issued periodic policy reminders that covered a 
variety of topics such as electronic communications and social media policies. 

19. KIS and KBCM, however, failed to implement a system of follow-up and review 
to determine that supervisors were reasonably following KIS’s or KBCM’s policies.  While 
permitting employees to use approved communications methods, including on personal phones, 
for business communications, KIS and KBCM failed to implement sufficient monitoring to 
assure that their recordkeeping and communications policies were being followed.  

KIS and KBCM’s Recordkeeping Failures Across Their Businesses 
 

20. In September 2021, the Commission staff commenced a risk-based initiative to 
investigate whether broker-dealers were properly retaining business-related messages sent and 
received on personal devices.  KIS and KBCM cooperated with the investigation by voluntarily 
gathering and reviewing communications from the personal devices of a sampling of senior 
personnel.  These personnel included senior leadership at both KIS and KBCM, including KIS 
advisory personnel and individuals in fixed income sales and trading, public sector and public 
finance, investment banking, and institutional equities at KBCM. 



 
 

5 
 

21. The Commission staff’s investigation uncovered pervasive off-channel 
communications at various seniority levels of KIS’ broker-dealer and investment adviser and 
KBCM’s broker-dealer.  At the Staff’s request, KIS and KBCM reviewed off-channel 
communications data from a sampling of their personnel and found that certain of the individuals 
had engaged in at least some level of off-channel communications activity.  Overall, personnel 
sent and received numerous off-channel communications, involving other KIS or KBCM more 
junior personnel, KIS’s and KBCM’s broker-dealer customers and KIS’s investment advisory 
clients, and other participants in the securities industry.  Within KIS and KBCM, some senior 
leadership participated in off-channel communications. 

22. From at least January 2019, KIS and KBCM personnel sent and received off-
channel messages that concerned the businesses of the broker dealers.  During this period, KIS’s 
investment adviser personnel sent and received off-channel messages related to, among other 
things, providing and recommending investment advice to clients and conducted internal 
discussions with other KIS investment adviser personnel.   

23. For example, from December 2020 through November 2021, a Managing Director 
in the Investment Banking group at KBCM exchanged numerous off-channel business-related 
messages with several KBCM colleagues, including other Managing Directors, as well as 
personnel at other financial services firms and market participants.  These messages related to 
the broker-dealer’s business as such. 

24. In another example, between March 2021 and November 2021, a Regional 
Executive and Wealth Market Leader at KIS exchanged a number of off-channel messages with 
several KIS colleagues relating to among other things, the broker-dealer’s business as such and 
investment advice provided to advisory clients. 

KIS’s and KBCM’s Failure to Preserve Required Records Potentially 
Compromised and Delayed Commission Matters 

25. Between January 2019 and November 2022, KIS and KBCM received and 
responded to Commission subpoenas for documents and/or records requests in Commission 
investigations.  By failing to maintain and preserve required records relating to their businesses, 
KIS and KBCM likely deprived the Commission of these off-channel communications in various 
investigations. 

KIS’s and KBCM’s Violations and Failure to Supervise 

26. As a result of the conduct described above, from at least January 2019 through the 
date of this Order, KIS and KBCM willfully2 violated Section 17(a) of the Exchange Act and 

 
2  “Willfully,” for purposes of imposing relief under Section 15(b) of the Exchange Act and 
Section 203(e) of the Advisers Act “‘means no more than that the person charged with the duty 
knows what he is doing.’”  See Wonsover v. SEC, 205 F.3d 408, 414 (D.C. Cir 2000) (quoting 
Hughes v. SEC, 174 F.2d 969, 977 (D.C. Cir. 1949)).  There is no requirement that the actor 
“also be aware that he is violating one of the Rules or Acts.”  Tager v. SEC, 344 F.2d 5, 8 (2d 
 



 
 

6 
 

Rule 17a-4(b)(4) thereunder, which require broker-dealers to preserve for at least three years 
originals of all communications received and copies of all communications sent relating to its 
business as such.   

27. As a result of the conduct described above, from at least January 2019 through the 
date of this Order, KIS willfully violated Section 204 of the Advisers Act and Rule 204-2(a)(7) 
thereunder, which require investment advisers to preserve in an easily accessible place originals of 
all written communications received and copies of all written communications sent relating to, 
among other things, any recommendation made or proposed to be made and any advice given or 
proposed to be given. 

28. As a result of the conduct described above, KIS and KBCM failed reasonably to 
supervise their employees with a view to preventing or detecting certain of their employees’ 
aiding and abetting violations of Section 17(a) of the Exchange Act and Rule 17a-4(b)(4) 
thereunder, within the meaning of Section 15(b)(4)(E) of the Exchange Act.  

29. As a result of the conduct described above, KIS failed reasonably to supervise its 
employees with a view to preventing or detecting certain of its employees’ aiding and abetting 
violations of Section 204 of the Advisers Act and Rule 204-2(a)(7) thereunder, within the 
meaning of Section 203(e)(6) of the Advisers Act. 

KIS’s and KBCM’s Remedial Efforts 

30. In determining to accept the Offers, the Commission considered steps promptly 
undertaken by KIS and KBCM, in part before the Commission’s inquiry, and cooperation afforded 
the Commission staff. 

Undertakings 

31. Prior to this action, Respondents enhanced their policies and procedures, and 
increased training concerning the use of approved communications methods, including on 
personal devices and began implementing changes to the technology available to employees.  In 
addition, Respondents have undertaken to: 

 Independent Compliance Consultant. 

a.  KIS and KBCM shall each retain, within thirty (30) days of the entry of this 
Order, the services of an independent compliance consultant (“Compliance Consultant”) 
that is not unacceptable to the Commission staff.  The Compliance Consultant’s 
compensation and expenses shall be borne exclusively by KIS and KBCM. 

 

 
Cir. 1965).  The decision in The Robare Group, Ltd. v. SEC, which construed the term 
“willfully” for purposes of a differently structured statutory provision, does not alter that 
standard.  922 F.3d 468, 478-79 (D.C. Cir. 2019) (setting forth the showing required to establish 
that a person has “willfully omit[ted]” material information from a required disclosure in 
violation of Section 207 of the Advisers Act). 



 
 

7 
 

b.  KIS and KBCM will oversee the work of the Compliance Consultant. 
 
c.  KIS and KBCM shall provide to the Commission staff, within sixty (60) days 

of the entry of this Order, a copy of the engagement letter detailing the Compliance 
Consultant’s responsibilities, which shall include a comprehensive compliance review as 
described below.  KIS and KBCM shall require that, within ninety (90) days of the date 
of the engagement letter, the Compliance Consultant conduct: 

 
i.  A comprehensive review of KIS’s and KBCM’s supervisory, 

compliance, and other policies and procedures designed to ensure that KIS’s and 
KBCM’s electronic communications, including those found on personal 
electronic devices, including without limitation, cellular phones (“Personal 
Devices”), are preserved in accordance with the requirements of the federal 
securities laws. 

 
ii.  A comprehensive review of training conducted by KIS and KBCM to 

ensure KIS’s and KBCM’s personnel are complying with the requirements 
regarding the preservation of electronic communications, including those found 
on Personal Devices, in accordance with the requirements of the federal securities 
laws, including by ensuring that KIS’s and KBCM’s personnel certify in writing 
on a quarterly basis that they are complying with preservation requirements.  

 
iii.  An assessment of the surveillance program measures implemented by 

KIS and KBCM to ensure compliance, on an ongoing basis, with the requirements 
found in the federal securities laws to preserve electronic communications, 
including those found on Personal Devices. 

 
iv.  An assessment of the technological solutions that KIS and KBCM 

have begun implementing to meet the record retention requirements of the federal 
securities laws, including an assessment of the likelihood that KIS’s and KBCM’s 
personnel will use the technological solutions going forward and a review of the 
measures employed by KIS and KBCM to track employee usage of new 
technological solutions.  

 
v.  An assessment of the measures used by KIS and KBCM to prevent the 

use of unauthorized communications methods for business communications by 
employees.  This assessment should include, but not be limited to, a review of 
KIS’s and KBCM’s policies and procedures to ascertain if they provide for any 
significant technology and/or behavioral restrictions that help prevent the risk of 
the use of unapproved communications methods on Personal Devices (e.g., 
trading floor restrictions).   

 
vi.  A review of KIS’s and KBCM’s electronic communications 

surveillance routines to ensure that electronic communications through approved 
communications methods found on Personal Devices are incorporated into KIS’s 
and KBCM’s overall communications surveillance program.   



 
 

8 
 

 
vii.  A comprehensive review of the framework adopted by KIS and 

KBCM to address instances of non-compliance by KIS’s and KBCM’s employees 
with KIS’s and KBCM’s policies and procedures concerning the use of Personal 
Devices to communicate about KIS and KBCM business in the past.  This review 
shall include a survey of how KIS and KBCM determined which employees failed 
to comply with KIS’s and KBCM’s policies and procedures, the corrective action 
carried out, an evaluation of who violated policies and why, what penalties were 
imposed, and whether penalties were handed out consistently across business 
lines and seniority levels.   

 
d. KIS and KBCM shall require that, within forty-five (45) days after completion 

of the review set forth in sub-paragraphs 31.c.i. through c.vii. above, the Compliance 
Consultant shall submit a detailed written report of its findings to KIS and KBCM and to 
the Commission staff (the “Report”).  KIS and KBCM shall require that the Report 
include a description of the review performed, the names of the individuals who 
performed the review, the conclusions reached, the Compliance Consultant’s 
recommendations for changes in or improvements to KIS’s and KBCM’s policies and 
procedures, and a summary of the plan for implementing the recommended changes in or 
improvements to KIS’s and KBCM’s policies and procedures. 

 
e.  KIS and KBCM shall adopt all recommendations contained in the Report 

within ninety (90) days of the date of the Report; provided, however, that within forty-
five (45) days after the date of the Report, KIS or KBCM shall advise the Compliance 
Consultant and the Commission staff in writing of any recommendations that KIS or 
KBCM consider to be unduly burdensome, impractical, or inappropriate.  With respect to 
any recommendation that KIS or KBCM considers unduly burdensome, impractical, or 
inappropriate, KIS or KBCM need not adopt such recommendation at that time, but shall 
propose in writing an alternative policy, procedure, or disclosure designed to achieve the 
same objective or purpose. 

 
f.  As to any recommendation concerning KIS’s or KBCM’s policies or 

procedures on which KIS or KBCM and the Compliance Consultant do not agree, KIS or 
KBCM and the Compliance Consultant shall attempt in good faith to reach an agreement 
within sixty (60) days after the date of the Report.  Within fifteen (15) days after the 
conclusion of the discussion and evaluation by KIS or KBCM and the Compliance 
Consultant, KIS or KBCM shall require that the Compliance Consultant inform KIS or 
KBCM and the Commission staff in writing of the Compliance Consultant’s final 
determination concerning any recommendation that KIS or KBCM considers to be 
unduly burdensome, impractical, or inappropriate.  KIS and KBCM shall abide by the 
determinations of the Compliance Consultant and, within sixty (60) days after final 
agreement between KIS and KBCM and the Compliance Consultant or final 
determination by the Compliance Consultant, whichever occurs first, KIS and KBCM 
shall adopt and implement all of the recommendations that the Compliance Consultant 
deems appropriate. 

 



 
 

9 
 

g.  KIS and KBCM shall cooperate fully with the Compliance Consultant and 
shall provide the Compliance Consultant with access to such of KIS’s and KBCM’s files, 
books, records, and personnel as are reasonably requested by the Compliance Consultant 
for review. 

 
h. KIS and KBCM shall not have the authority to terminate the Compliance 

Consultant or substitute another compliance consultant for the initial Compliance 
Consultant, without the prior written approval of the Commission staff.  KIS and KBCM 
shall compensate the Compliance Consultant and persons engaged to assist the 
Compliance Consultant for services rendered under this Order at their reasonable and 
customary rates. 

 
i.  For the period of engagement and for a period of two years from completion of 

the engagement, KIS and KBCM shall not (i) retain the Compliance Consultant for any 
other professional services outside of the services described in this Order; (ii) enter into 
any other professional relationship with the Compliance Consultant, including any 
employment, consultant, attorney-client, auditing or other professional relationship; or 
(iii) enter, without prior written consent of the Commission staff, into any such 
professional relationship with any of the Compliance Consultant’s present or former 
affiliates, employers, directors, officers, employees, or agents acting in their capacity as 
such. 

 
j.  The Report submitted by the Compliance Consultant will likely include 

confidential financial, proprietary, competitive business or commercial information.  
Public disclosure of the Report could discourage cooperation, impede pending or 
potential government investigations or undermine the objectives of the reporting 
requirement.  For these reasons, among others, the Report and the contents thereof are 
intended to remain and shall remain non-public, except (1) pursuant to court order, (2) as 
agreed to by the parties in writing, (3) to the extent that the Commission determines in its 
sole discretion that disclosure would be in furtherance of the Commission’s discharge of 
its duties and responsibilities, or (4) as otherwise required by law. 
 
32.   One-Year Evaluation.  KIS and KBCM shall each require the Compliance 

Consultant to assess KIS’s and KBCM’s programs for the preservation, as required under the 
federal securities laws, of electronic communications, including those found on Personal 
Devices, commencing one year after submitting the Report required by Paragraph 31.d above.  
KIS and KBCM shall require this review to evaluate KIS’s and KBCM’s progress in the areas 
described in Paragraph 31.c.i-vii above.  After this review, KIS and KBCM shall require the 
Compliance Consultant to submit a report (the “One Year Report”) to each of KIS and KBCM 
and the Commission staff and shall ensure that the One Year Report includes an updated 
assessment of KIS’s and KBCM’s policies and procedures with regard to the preservation of 
electronic communications (including those found on Personal Devices), training, surveillance 
programs, and technological solutions implemented in the prior year period.  

 
33. Reporting Discipline Imposed.  For two years following the entry of this Order, 

KIS and KBCM shall notify the Commission staff as follows upon the imposition of any discipline 



 
 

10 
 

imposed by KIS or KBCM, including, but not limited to, written warnings, loss of any pay, bonus, 
or incentive compensation, or the termination of employment, with respect to any employee found 
to have violated KIS’s or KBCM’s policies and procedures concerning the preservation of 
electronic communications, including those found on Personal Devices: at least 48 hours before the 
filing of a Form U-5, or within ten (10) days of the imposition of other discipline.    

 
34.  Internal Audit.  In addition to the Compliance Consultant’s review and issuance of 

the One Year Report, KIS and KBCM will each also have their respective Internal Audit functions 
conduct a separate audit(s) to assess KIS’s and KBCM’s progress in the areas described in 
Paragraph 31.c.i-vii above.  After completion of this audit(s), KIS and KBCM shall ensure that 
Internal Audit submits a report to each of KIS and KBCM and to the Commission staff. 

 
35. Recordkeeping.  KIS and KBCM shall each preserve, for a period of not less than 

six (6) years from the end of the fiscal year last used, the first two (2) years in an easily 
accessible place, any record of compliance with these undertakings.  KIS shall also preserve any 
record of compliance with these undertakings in an easily accessible place for a period of not less 
than five (5) years from the end of the fiscal year during which the entry was made on such record, 
the first two (2) years in an appropriate office of KIS.  
 

36. Deadlines.  For good cause shown, the Commission staff may extend any of the 
procedural dates relating to the undertakings.  Deadlines for procedural dates shall be counted in 
calendar days, except that if the last day falls on a weekend or federal holiday, the next business 
day shall be considered to be the last day. 

37. Certification.  KIS and KBCM shall each certify, in writing, compliance with the 
undertakings set forth above.  The certification shall identify the undertakings, provide written 
evidence of compliance in the form of a narrative, and be supported by exhibits sufficient to 
demonstrate compliance.  The Commission staff may make reasonable requests for further 
evidence of compliance, and Respondents agree to provide such evidence.  The certifications and 
supporting material shall be submitted to Amy S. Cotter, Assistant Director, Division of 
Enforcement, Chicago Regional Office, Securities and Exchange Commission, 175 W. Jackson 
Blvd., Suite 1450, Chicago, IL 60604, or such other person as the Commission staff may request, 
with a copy to the Office of Chief Counsel of the Enforcement Division, no later than sixty (60) 
days from the date of the completion of the undertakings. 

 

IV. 

 In view of the foregoing, the Commission deems it appropriate and in the public interest 
to impose the sanctions agreed to in Respondents’ Offers. 
 
 Accordingly, pursuant to Sections 15(b) and 21C of the Exchange Act as to KIS and 
KBCM and Sections 203(e) and 203(k) of the Advisers Act as to KIS, it is hereby ORDERED 
that: 
 



 
 

11 
 

A. KIS and KBCM cease and desist from committing or causing any violations and 
any future violations of Section 17(a) of the Exchange Act and Rule 17a-4 
thereunder. 

 
B. KIS cease and desist from committing or causing any violations and any future 

violations of Section 204 of the Advisers Act and Rule 204-2 thereunder. 
 
C. Respondents are censured.  
 
D. Respondents shall comply with the undertakings enumerated in paragraphs 31 to 

37 above. 
  
 E. Respondents shall, jointly and severally, within 14 days of the entry of this Order, 

pay a civil money penalty in the amount of $10,000,000 to the Securities and 
Exchange Commission for transfer to the general fund of the United States 
Treasury, subject to Exchange Act Section 21F(g)(3).  If timely payment is not 
made, additional interest shall accrue pursuant to 31 U.S.C. § 3717.   

 
 Payment must be made in one of the following ways:   
 

(1) Respondents may transmit payment electronically to the Commission, 
which will provide detailed ACH transfer/Fedwire instructions upon 
request;  

 
(2) Respondents may make direct payment from a bank account via Pay.gov 

through the SEC website at http://www.sec.gov/about/offices/ofm.htm; or  
 
(3) Respondents may pay by certified check, bank cashier’s check, or United 

States postal money order, made payable to the Securities and Exchange 
Commission and hand-delivered or mailed to:  

 
Enterprise Services Center 
Accounts Receivable Branch 
HQ Bldg., Room 181, AMZ-341 
6500 South MacArthur Boulevard 
Oklahoma City, OK 73169 

 
Payments by check or money order must be accompanied by a cover letter identifying 

KIS and KBCM as the Respondents in these proceedings, and the file number of these 
proceedings; a copy of the cover letter and check or money order must be sent to Amy S. Cotter, 
Assistant Director, Division of Enforcement, Chicago Regional Office, Securities and Exchange 
Commission, 175 W. Jackson Blvd., Suite 1450, Chicago, IL 60604.   
 
 F. Amounts ordered to be paid as civil money penalties pursuant to this Order shall 
be treated as penalties paid to the government for all purposes, including all tax purposes.  To 
preserve the deterrent effect of the civil penalty, Respondents agree that in any Related Investor 



 
 

12 
 

Action, they shall not argue that they are entitled to, nor shall they benefit by, offset or reduction 
of any award of compensatory damages by the amount of any part of Respondents’ payment of a 
civil penalty in this action (“Penalty Offset”).  If the court in any Related Investor Action grants 
such a Penalty Offset, Respondents agree that they shall, within 30 days after entry of a final 
order granting the Penalty Offset, notify the Commission’s counsel in this action and pay the 
amount of the Penalty Offset to the Securities and Exchange Commission.  Such a payment shall 
not be deemed an additional civil penalty and shall not be deemed to change the amount of the 
civil penalty imposed in this proceeding.  For purposes of this paragraph, a “Related Investor 
Action” means a private damages action brought against Respondents by or on behalf of one or 
more investors based on substantially the same facts as alleged in the Order instituted by the 
Commission in this proceeding. 
 
 By the Commission. 
 
 
 

Vanessa A. Countryman 
       Secretary 


	UNITED STATES OF AMERICA
	In the Matter of
	Respondents.
	I.
	II.
	III.
	Summary
	Respondents
	Recordkeeping Requirements under the Exchange and Advisers Acts
	KIS’s and KBCM’s Policies and Procedures
	KIS and KBCM’s Recordkeeping Failures Across Their Businesses
	KIS’s and KBCM’s Failure to Preserve Required Records Potentially Compromised and Delayed Commission Matters
	KIS’s and KBCM’s Violations and Failure to Supervise
	KIS’s and KBCM’s Remedial Efforts

	IV.