Nobody wakes up excited about a surprise custody RIA exam. You know it is coming sometime this year. You just do not get to know when, and that is sort of the point.

If your firm touches client assets in any of the familiar ways, a fund structure, a trustee role, a related-person setup, or certain account authority, SEC Rule 206(4)-2 may put you on the hook for an annual independent verification. The accountant picks the date, skips the warning, and mixes up the timing year to year. 

For a small advisory firm, that timing problem is the whole problem. The exam itself is doable. The disruption it causes when your operations team is five people and the request lands during a capital call is what hurts. So the question worth asking before the call comes is who you want doing this work, because that decision quietly determines whether the next few weeks are a grind or a nonevent.

For a growing number of boutique RIAs, the answer is Michael Coglianese, CPA, P.C. 

Experience With RIA Custody Exams Matters More Than You Think

Experience is where this starts, because a surprise RIA exam works nothing like a regular audit.

We are not looking at your books. We are confirming that the client funds and securities you have on record are really where you say they are. Once the work is done, we file Form ADV-E within 120 days and notify the SEC within one business day if something material turns up.

Years of running these exams for alternative investment firms taught us where the trouble usually hides. Think a sleeve missing from the account list, a custodian arrangement that nobody got around to documenting, or an ADV that no longer matches how the firm operates day to day.

Our job is to catch that before the surprise date, not after.

Custody Rule Nuance Is Where Boutique RIAs Need the Most Help

You want a partner who reads the rule against your actual firm, not against a template.

Custody under Rule 206(4)-2 has a wide reach. It picks up firms that hold client funds or securities directly or indirectly, firms with withdrawal authority, and roles like general partner, managing member, or trustee. 

Two important exceptions also live inside the rule: the fee-deduction provision and the pooled-fund annual audit alternative for LPs and LLCs.

That mix of triggers and carve-outs is where most of the wrong calls get made. We sit down with your structure, your agreements, and your account authorities, and tell you which path your RIA exam should follow. The SEC withdrew the 2023 Safeguarding proposal in June 2025, so the current rule is the one we work you through, with no guessing about what comes next.

A Collaborative Approach That Minimizes Disruption

Surprise does not have to mean chaos. Even though the date itself stays unannounced, everything around it can still be organized. 

Before the year starts, we scope the engagement with you, walk through your custody triggers, map your client accounts and custodians, and confirm who picks up the phone once fieldwork begins. Your team knows what records to keep within reach, so an RIA exam landing in October does not blow up an investor close in November.

That kind of preparation matters now. The SEC’s 2026 examination priorities keep the custody rule as a core focus and remind firms that the published list is not exhaustive. Custody readiness belongs in your compliance routine, not on the calendar once a year.  

Boutique RIAs Need Cost-Conscious Guidance, Not Big Firm Overkill

The final thing worth saying out loud is the price tag.

A national audit firm will quote you a fee built for a client 10 times your size, then staff your engagement with people who have never set foot inside a boutique alternative shop. You are essentially paying for a process designed around someone else’s business. 

We, in contrast, built our audit and assurance practice the other way around. RIA audits, Surprise Custody Exams, and the rest of the regulated financial services work we handle get scoped to your firm, priced for your firm, and run by a partner you can call directly.

That is the kind of RIA exam relationship boutique advisers stick with.

Why Boutique RIAs Land on Our Firm for Surprise Custody Exams

A surprise custody exam should not feel like someone kicking your door in. The rule is dense, the clock is unforgiving, and the paperwork piles up fast. None of that needs to wreck your quarter when the team across the table knows what it is doing. You want an exam partner who reads the custody rule against your actual business, runs the engagement around your calendar, and picks up the phone when something odd shows up in the account list.

That has been our lane at Michael Coglianese, CPA, P.C. for over 30 years. We grew up inside the alternative investment industry, and our audit and assurance practice reflects it. RIAs, broker-dealers, hedge funds, futures firms, and crypto funds all sit on our roster, and the Surprise Custody Exam work that comes with RIA custody obligations is part of the day job, not a side gig. Behind that work is a team that includes former regulators and Big Four professionals, a PCAOB registration, AICPA membership, and a real commitment to serving the boutique side of the industry, where partner-level access, plainspoken answers, and a fair fee still mean something.

If a surprise custody exam is on your horizon, reach out and let us walk through your custody setup, what the exam will ask of you, and how we keep the whole thing from eating your week.