Draft Corrective Action Plan

---
name: corrective-action-plan-sec-ocie-deficiency
task_id: corporate-governance/draft-corrective-action-plan
description: Formal corrective action plan in response to a regulatory examination deficiency letter, addressing root causes, communications-recordkeeping scope, compliance-officer independence, performance-data reconciliation, and retroactive disclosure amendment obligations.
activates_for: [planner, solver, checker]
---

# Skill: Corrective Action Plan in Response to Regulatory Examination Deficiency Letter

## 1. Subject-matter triage
- Read the deficiency letter as a supervisory action plan, not as a narrative response.
- Separate each cited deficiency into its own remedial track before drafting the document.
- Identify whether the letter implicates:
  - communications retention or supervision,
  - compliance independence or organizational structure,
  - marketing/performance presentation accuracy,
  - complaint handling and disclosure history,
  - written supervisory procedure gaps,
  - resource and implementation capacity.
- If a deficiency turns on multiple records or time periods, treat the scope as potentially broader than the cited examples and address how the full population will be assessed.

## 2. Failure modes the skill is correcting
- Treating a sampled recordkeeping issue as limited to the reviewed examples instead of addressing the broader noncompliance population implied by the examiner’s methodology.
- Responding to a compliance-function conflict with training alone when the problem is structural and requires separation of duties or another durable remedy.
- Framing an unverifiable performance figure as a disclosure problem when the proper remediation is correction, withdrawal, or client notice if the figure cannot be substantiated.
- Omitting a root-cause explanation and presenting isolated fixes that do not address why the deficiency occurred.
- Failing to tie each corrective step to a specific owner, deadline, and validation method.
- Neglecting to amend the written supervisory procedures that governed the failure.
- Omitting a resource plan showing staffing, technology, and outside expertise necessary to implement the remediation.
- Ignoring the possibility that one deficiency may reveal the mechanism for another, especially where communications, complaint handling, and disclosure obligations intersect.

## 3. Legal frameworks / domain conventions that apply
- A formal corrective action plan should address each deficiency with: root cause, corrective measure, responsible person or department, completion date, and testing or verification.
- Examination findings based on sampling should be treated as having potential population-level implications; the response should explain the proposed lookback methodology and how results will be reported.
- Written supervisory procedures should be updated to reflect the specific control failure identified in the letter, not merely restated in general terms.
- Compliance independence concerns are ordinarily resolved by structural separation, dedicated personnel, or external support where a dual role compromises oversight.
- An untraceable or irreconcilable performance presentation should be corrected or withdrawn; additional qualification does not cure an unverifiable source.
- Complaint or disclosure misclassification may require retroactive review and possible amendment assessment by specialized outside counsel.
- Cooperation and self-reporting questions should be evaluated where a CAP review uncovers issues not yet examined by regulators.
- Any legal proposition stated in the plan should be tied to the governing authority cited in the letter or the applicable regulatory framework for the advisory context.

## 4. Analytical scaffolds
- For each deficiency, write a short root-cause statement that identifies the systemic failure, such as deficient procedures, inadequate testing, flawed supervision, conflicted reporting lines, or missing escalation controls.
- For communications-recordkeeping issues, describe the scope method: review the cited sample, determine the universe implicated by the same control failure, and specify how the expanded review will be conducted and reported.
- For performance-related issues, verify whether the challenged number can be reconciled to a methodology. If not, commit to removal or correction and identify how affected clients will be located and notified.
- For compliance-independence issues, test whether the compliance function shares business, supervisory, or operational responsibility. If so, draft a structural remedy that removes the conflict and defines the interim operating model.
- For complaint or disclosure history issues, review how complaints were categorized, escalated, and disclosed; identify whether any retroactive amendment review is needed and assign outside counsel to assess it.
- For each action item, include:
  - the specific remedial step,
  - the responsible role,
  - the implementation deadline,
  - the validation method,
  - any dependency on counsel, consultants, or technology.
- Where deficiencies may be related, state the relationship explicitly so the plan reads as an integrated control remediation rather than disconnected fixes.

## 5. Vertical / structural / temporal relationships
- If the same compliance conflict may have affected detection of multiple deficiencies, acknowledge that the independence issue may be a cross-cutting root cause.
- If communications failures and disclosure failures intersect, explain whether the communication review may reveal how complaint handling or reporting obligations were bypassed.
- If a remediation depends on a policy rewrite, implementation testing should follow the policy effective date and should not be treated as complete until the revised procedure is in operation.
- If outside counsel or consultants are needed, note whether their work is sequential to internal fact development or parallel with it.

## 6. Output structure conventions
- Draft a formal submission-ready corrective action plan in conventional memorandum style.
- Organize the body by deficiency number or issue heading that tracks the examination letter.
- For each deficiency, use a consistent internal structure:
  - deficiency summary,
  - root cause,
  - corrective actions,
  - owner,
  - deadline,
  - verification/testing.
- Include a distinct resources section covering personnel, technology, and outside advisor support.
- Include a distinct procedures-updates section identifying the affected supervisory controls and the nature of the amendment.
- Include a distinct retroactive-review section where complaint, disclosure, or amendment questions may arise.
- Include a distinct self-report assessment section if new issues uncovered during remediation may warrant voluntary disclosure consideration.
- End with a concise implementation closeout section stating how completion will be documented and reported.
- Keep the tone formal, regulatory, and submission-ready; avoid advocacy language that minimizes the deficiencies.