The Manager-In-Charge (MIC) regime is one of the SFC's most significant regulatory frameworks for enhancing senior management accountability in licensed corporations. Introduced through the SFC's Circular on Measures for Augmenting the Accountability of Senior Management, the regime requires licensed corporations to identify and designate individuals who are primarily responsible for managing each of the firm's core functions. This guide provides a thorough explanation of the MIC regime, the 8 Core Functions, designation requirements, and practical implementation guidance.
1. Background and Purpose of the MIC Regime
The MIC regime was introduced by the SFC to address a perceived gap in senior management accountability. Prior to the MIC regime, the SFC observed instances where firms had unclear lines of responsibility, making it difficult to identify who was accountable for specific business functions and, more importantly, for failures in those functions.
Key Objectives
- Clarity of accountability: Ensure that every critical function within a licensed corporation has a clearly identified individual who bears responsibility
- Enhanced governance: Strengthen the governance framework of licensed corporations by requiring formal designation of senior managers
- Regulatory efficiency: Enable the SFC to more effectively identify and engage with the individuals responsible for specific functions when issues arise
- Culture of accountability: Foster a culture where senior management takes personal ownership of compliance and risk management
The regime applies to all SFC licensed corporations, regardless of their size. However, the SFC recognises that smaller firms may have the same individual fulfilling multiple MIC roles, which is permissible as long as the individual has the capacity and competence to perform all designated functions effectively.
2. The 8 Core Functions
The MIC regime identifies 8 Core Functions that represent the essential activities of a licensed corporation. For each applicable core function, the firm must designate at least one Manager-In-Charge.
Overall Management Oversight
This function covers the overall strategic direction and management of the licensed corporation's business. The MIC for this function is typically the CEO, Managing Director, or the most senior executive responsible for the firm's overall operations. This individual is expected to have a comprehensive understanding of the firm's business, risks, and regulatory obligations.
Key Business Line
This function covers the management of each key business line that constitutes a regulated activity. For example, if a firm is licensed for both Type 1 (dealing) and Type 9 (asset management), it should designate a separate MIC for each business line (though the same individual can serve both roles if appropriate). The MIC for this function is typically the head of each business unit or trading desk.
Operational Control and Review
This function covers the operational infrastructure of the firm, including trade processing, settlement, account management, and record-keeping. The MIC is typically the COO or Head of Operations, responsible for ensuring that the firm's operational processes are efficient, accurate, and compliant with regulatory requirements.
Risk Management
This function covers the identification, measurement, monitoring, and management of risks across the firm. The MIC is typically the Chief Risk Officer or Head of Risk Management. The SFC expects this function to be independent from the business lines it monitors, to the extent that the firm's size permits.
Finance and Accounting
This function covers financial management, accounting, regulatory capital management, and financial reporting (including FRR compliance). The MIC is typically the CFO or Finance Director, responsible for ensuring accurate financial records, timely regulatory reporting, and maintenance of adequate financial resources.
Information Technology
This function covers the firm's technology infrastructure, cybersecurity, data management, and technology governance. The MIC is typically the CTO, Head of IT, or an equivalent technology leader. Given the increasing importance of cybersecurity, the SFC places significant emphasis on this function.
Compliance
This function covers the compliance framework, regulatory advisory, compliance monitoring, and regulatory reporting. The MIC is typically the Chief Compliance Officer or Head of Compliance. The SFC expects this function to have appropriate independence and authority within the organisation.
Anti-Money Laundering and Counter-Terrorist Financing (AML/CTF)
This function specifically covers AML/CTF compliance, including client due diligence, transaction monitoring, suspicious transaction reporting, and sanctions screening. The MIC is typically the Money Laundering Reporting Officer (MLRO) or AML compliance officer. Given the global emphasis on AML compliance, this function receives particular scrutiny from the SFC.
Not All Functions Apply to Every Firm
Smaller firms may not have all 8 core functions as separate activities. For example, a small Type 9 licensed corporation with 3 staff may have one person serving as MIC for multiple core functions. The key requirement is that all applicable functions are covered, and the designated MICs have the competence and capacity to fulfil their responsibilities.
3. Who Needs to Be Designated as MIC?
The MIC regime applies to individuals who have primary responsibility for managing a core function. The SFC expects MICs to be:
- Licensed individuals: MICs must generally be Licensed Representatives or Responsible Officers of the licensed corporation
- Sufficiently senior: They must have the authority and position to effectively manage the designated core function
- Competent: They must have the knowledge, skills, and experience relevant to the core function they manage
- Accountable: They must accept personal accountability for the performance of the core function
Overlap with RO Roles
In many firms, particularly smaller ones, the MIC designations overlap significantly with the RO roles. An RO for Type 1 activities might also be the MIC for Core Function 2 (Key Business Line) for the dealing business. This is perfectly acceptable, and in fact common. The MIC regime complements rather than replaces the RO framework.
4. Board Responsibilities
The board of directors of a licensed corporation has overarching responsibility for the MIC regime. Specifically, the board is expected to:
- Approve MIC designations: Formally approve the designation of each MIC through a board resolution
- Ensure adequate resources: Ensure that each MIC has the resources, authority, and support needed to fulfil their role
- Monitor effectiveness: Periodically review whether MIC designations remain appropriate and whether MICs are fulfilling their responsibilities effectively
- Succession planning: Ensure that there are succession plans in place for key MIC positions
- Address gaps: Promptly address any gaps in MIC designations when individuals leave or change roles
5. Regulatory Expectations
The SFC has specific expectations regarding how the MIC regime should operate in practice:
Documentation
- Formal designation letters or terms of reference for each MIC
- Clear description of the scope and boundaries of each MIC's responsibilities
- Board resolutions approving MIC designations
- Updated organisational chart showing MIC assignments
Notification to the SFC
- Licensed corporations must notify the SFC of their MIC designations
- Changes in MIC designations must be promptly reported to the SFC
- Notifications are typically made through the WINGS portal or by written correspondence
Ongoing Review
- The board should review MIC designations at least annually
- Reviews should assess whether the designated individuals remain suitable and whether the regime is operating effectively
- Any changes in business activities that affect the relevance of core functions should trigger a review
SFC Enforcement
The SFC has indicated that it will consider the conduct and accountability of MICs when taking enforcement action. If a regulatory breach occurs in a particular area, the SFC will look to the designated MIC for that core function as a key person of interest. This underscores the importance of taking MIC designations seriously and ensuring that designated individuals are genuinely engaged in managing their respective functions.
6. Implementation Guide
For firms that are newly licensed or have not yet fully implemented the MIC regime, here is a step-by-step implementation guide:
Step 1: Map Your Core Functions
Review the 8 Core Functions and determine which ones apply to your firm. For most licensed corporations, at least Core Functions 1, 2, 5, 7, and 8 will apply. Larger or more complex firms will likely have all 8 functions applicable.
Step 2: Identify Appropriate MICs
For each applicable core function, identify the individual who is best positioned to serve as MIC. Consider their:
- Current responsibilities and whether they already manage the function in practice
- Licensing status (they generally need to be licensed)
- Competence and experience relevant to the function
- Capacity to take on the responsibility alongside their other duties
Step 3: Formalise Designations
- Prepare designation letters or terms of reference for each MIC
- Obtain board approval for all MIC designations
- Brief each MIC on their responsibilities and the SFC's expectations
- Update the organisational chart
Step 4: Notify the SFC
- Submit MIC notifications through the WINGS portal
- Ensure all details are accurate and consistent with internal records
Step 5: Establish Ongoing Governance
- Incorporate MIC reviews into the board's annual agenda
- Establish a process for promptly updating designations when personnel changes occur
- Ensure MICs report regularly to the board on the status of their core function
7. Common Questions
Can one person be MIC for multiple core functions?
Yes, particularly in smaller firms. The SFC acknowledges that in smaller licensed corporations, a single individual may serve as MIC for multiple core functions. The key consideration is whether the individual has the capacity and competence to effectively manage all designated functions. In very small firms with 2-3 staff, it is common for 1-2 individuals to cover all applicable MIC roles.
Does the MIC need to be a Responsible Officer?
Not necessarily, but in practice, MICs for core business functions (Core Functions 1 and 2) are typically also ROs. For support functions like IT or finance, the MIC may be a Licensed Representative or even an unlicensed senior manager, though the SFC generally prefers licensed individuals.
What happens if a MIC leaves the firm?
The firm must promptly designate a replacement MIC and notify the SFC. There should not be a prolonged period where a core function has no designated MIC. This is why succession planning is an important element of the MIC regime.
How does the MIC regime affect day-to-day operations?
For well-managed firms, the MIC regime should formalise and document what is already happening in practice. It is about clarity and accountability rather than creating new operational requirements. The practical impact is primarily in documentation, notification to the SFC, and the heightened personal accountability of designated individuals.
Is the MIC regime the same as the Senior Managers Regime in the UK?
There are similarities in concept — both aim to enhance individual accountability at the senior management level. However, the Hong Kong MIC regime is less prescriptive than the UK's Senior Managers and Certification Regime (SM&CR) and does not include features like the UK's reverse burden of proof. The MIC regime focuses on identification and designation rather than creating new statutory obligations.
Can MIC functions be outsourced?
While certain operational activities can be outsourced, the MIC responsibility itself cannot be outsourced. The designated MIC must be an individual within the firm (or closely connected to it) who takes personal accountability for the function. If a support function like IT is outsourced, the MIC for Core Function 6 would be the internal individual who manages and oversees the outsourcing arrangement.
"The MIC regime is fundamentally about ensuring that every critical function in a licensed corporation has a name attached to it — someone who is accountable, competent, and engaged. For firms that already have strong governance, it is largely a formalisation exercise. For those that do not, it is a catalyst for improving management structures."