According to FINRA, Morgan Stanley & Co. LLC was censured and fined $1,000,000 for failing to establish adequate risk management controls for its market access business.

The firm's violations centered on inadequate documentation and procedures for controlling potentially erroneous orders. When onboarding new customers, the firm's procedures did not describe how to place clients into appropriate risk groups or establish reasonable thresholds for order controls.

Specifically, the firm failed to document on a customer-by-customer basis why 'price away' controls (preventing orders priced significantly away from reference prices) and 'single order notional value' controls (limiting maximum order amounts) were appropriate. For high-touch traders, the firm applied standardized thresholds without documented rationale, permitting all traders on certain desks to submit large orders regardless of experience level.

The firm also applied 'soft blocks' or 'hold limits' to orders that breached risk thresholds, but did not require personnel reviewing paused orders to document why they released orders into the market. Additionally, amended orders that were more conservative than originals could be released without manual review, which was unreasonable for preventing erroneous orders.

The firm's periodic reviews of control effectiveness were also inadequate, only triggering when limits exceeded very high maximum guidelines that would not identify customers with potentially unreasonable limits.

This case highlights the critical importance of documented, well-designed market access controls. Such controls protect not only the firm but also the broader market from potentially disruptive erroneous orders.