Tag Archive: Best Practices


iStock_000009182001XSmallIn a day where security threats are constantly evolving and your business is reponsible for keeping confidential information secure, your clients’ computer systems may seem an unlikely place to prod your nose, but unfortunately, an increasing number of security threats are originating from the clients of investment advisors.

One recurring example that we have witnessed over the past year, is the hacking of email accounts.  In this scenario, your client’s email account with Google gets hacked because their password is “patriots1” or perhaps their PC has been infected with a keylogger virus.  In any event, a hacker somehow discovers your client’s password and now has access to their historic email records.

In the past, hackers might have been satisfied to use that account to SPAM everyone on earth, but today’s hackers are more sophisticated.  Apparently, they’ll actually take the time to read through your client’s emails in search of financially sensitive information.  Based on the content of previous communications with your firm, they can compose a similar looking email to one that the client might have sent in the past to ask your staff about total holdings or even request a check.

Here are some tips your clients should follow to keep their email and other accounts secure:

  1. Don’t enter your passwords in kiosks and other systems available to the public.
  2. When you get the option to store the password for various accounts and websites on your PC, don’t do it.
  3. Never send your passwords in an email.
  4. Use encrypted email connections.
  5. Institute complex passwords.  I know it’s a pain, but so is having your identity stolen.
  6. Don’t use the same passwords for multiple accounts.  Yes, this is a pain too, but there are some programs like eWallet that can help.
  7. Run up-to-date versions of security software that include protection for spyware, malware and viruses.  Don’t ignore messages from your Antivirus program.
  8. Stay up-to-date on operating system and application security patches.
  9. Be cautious of which sites you browse.  A program like openDNS can help you keep your computers clean by limiting access to potentially harmful websites.  The home version of OpenDNS is free.  You can find it at www.opendns.org.  Antivirus programs like AVG and Symantec can filter websites too, but do it with less specific controls.

Here is what your clients should to do if they do get hacked:

  1. Contact a computer professional or the email provider to help determine how you got hacked.
  2. Alert your investment advisor and other vendor relationships that hackers could try to take advantage of.
  3. Resolve any issues that may have led to the hack, such as: simple passwords, malware, spyware, and viruses.
  4. Change your passwords and any hints from a computer system, smart phone or the original system once the threats have been removed on the following: the hacked site, any other sites where you used the same username and password and any sites whose information you stored in the hacked account.
  5. If you determine that you have been a victim of spyware or malware, you will need to change all your passwords for your online accounts and follow the procedures for recovering from identity theft.
  6. If you cannot follow any of these steps because your account credentials have been changed, you will need to contact the company providing that account in order to regain control of your account.
  7. Implement better security provisions going forward.

There is only so much you can do to protect your clients.  Ensuring that email communications are secure should be at the top of the list. Your firm can implement a product like Zixmail to encrypt selected emails, but at the point where your client’s computer system has been compromised, this may only provide an additional deterrent, and should not be seen as the solution to the problem.

The best course of action is a combination of staying vigilant, educating your clients, implementing best-practice email security, and instituting additional internal controls aimed at how your firm handles client communications, such as balance and check requests.

About the Author: Kevin Shea is President of InfoSystems Integrated, Inc. (ISI); ISI provides a wide variety of outsourced IT solutions to investment advisors nationwide.

For details, please visit isitc.com, contact Kevin Shea via phone at 617-720-3400 x202 or e-mail at kshea@isitc.com.

Dad_Vero_ClippedQuarter end reporting for Q4 2011 was a grueling task – one that still wasn’t completed for some firms in February of 2012. I am in touch with the operations staff of representative investment firms of varied disciplines and sizes. That quarter I heard it from just about everybody. Firms were transferring accounts to different custodians, embracing new trading platforms, contemplating portfolio management system changes and enhancements to client-facing reporting as well as more robust outsourcing options … but the show must go on.

The operations staff rarely gets a break. They must deal with new initiatives as they come and still manage to get their regular work done. The act of balancing the two responsibilities can be difficult and exhausting for those faced with these demands. To quote one of my clients, “Every time you turn around its quarter end.”

As a consultant to many of these firms, I have a unique view of the daily grind of typical investment professionals. In the past, they could take reasonable breaks for lunch, etc., but more and more of the people I work with are going without the niceties of lunches out and a little down-time during the day. An illness in the family can be particularly troublesome for those working in investment operations to deal with. Illnesses are seldom convenient or negotiable.

In addition to the normal challenges that I face in any given quarter, that quarter I had to deal with one that I had no control over – the death of a loved one. My father, who, at age 73, seemed to be in outstanding health had a sudden and unexpected heart attack on the evening of January 23rd, 2012. There is never a good time for something like that to happen, but the 23rd was better than the 8th would have been for me. I was on the phone with him when it happened, and heard him utter his last words, “I feel so dizzy.” Then he collapsed.

It was so quick. I could hardly comprehend it. Over the course of the next few hours my brother and sister traveled home to New York to be with my mother as quickly as possible, while I tried to think about what I needed to do to wrap up any loose ends related to my clients’ quarter end reporting, and get home as soon as possible. After a day and half of chipping away at various tasks and setting things in motion, I needed to go home and grieve our loss with my family.

Dennis_shaking_hands_DR003My father had a successful career as a financial officer in the retail and financial service industries acting as consultant to many banks and fortune 500 companies. He kept his financial dealings fairly close to the vest, and though he had shared some of what he had done with me, I was not familiar with everything. His record-keeping was meticulous and nearly perfect in all respects but one – planning for his unexpected death. He had a joint will with my mother, but we couldn’t find it. He had assets and regular income, but getting my mother access to all of their assets would take time.

Over the next week, I went over his records, which included 22 years of tax returns and similar detailed records of my parent’s finances to lend what help I could in assessing the situation for my mother. I am no stranger to investment reports, so I winced when I saw my father’s Morgan Stanley Smith Barney statements. The production of statements as meaningless as these should be a criminal offense. I first saw statements like these back in 1987. In twenty-five years very little has changed. The statements are as dull and drab as possible. The only color afforded is the dark blue line that runs along the top. These statements are difficult for people who know what they are looking for to read – never mind those less familiar. At best, these statements are an inventory of holdings.

After looking through more of the investment statements, I eventually found summary statements that get sent out about a month after each quarter end. These statements were better, but not as good as most of what we create for our clients. Given their ability to produce better statements, firms like Morgan Stanley Smith Barney should be held to a higher reporting standard.

Over the course of nearly two weeks, my brother and I stoically exchanged quips like “Good will hunting” and “Where there is a will there’s a way” in humor that my father would have appreciated. Eventually, we found the will. It was perhaps the only thing improperly filed in his office. Throughout the ordeal, I couldn’t help thinking about how my father could have made things much easier for us by leaving us a list of the top ten things to do if he died. It might have taken him twenty minutes to put together if he had ever thought about it. I half expected to find such a list, but it was nowhere to be found – apparently, my Dad wasn’t planning to die. Here is what the list might have said:

Sorry to leave you all so suddenly, but here is what you need to do:

1. Call my attorney _______________ at _______________ , and have him execute my will. For some reason, I have the original copy of my will in the file marked _________________ at our home in ________________.

2. I have three whole life insurance policies that should provide a total non-taxable death benefit of approximately ___________________ .

They are:
a. _______________________________
b. _______________________________
c. _______________________________

Call my good friend _______________________ in the insurance business at ______________ and have him help you get the forms and file them. The proceeds from my life insurance should help with the transition period.

3. In the event of my passing, Mom should have access to the following regular income sources totaling about ________ per month:
a. ________ Pension.
b. My social security not hers.
c. The annuity.

4. All of the bank accounts are jointly held and your mother is listed as the primary beneficiary.

5. My retirement account will need to be transferred to her and she is listed as the primary beneficiary.

6. There is no money hidden anywhere. It was already raining.

7. Put the funeral on the Amex and the meal afterwards on the Underhill tab.

8. Yes. I want the cheapest casket.

9. Psalm 23.

10. Swing easy.

Love,
Dad

Using my personal experience with my father as an example, we can hopefully learn something.  First and foremost, we should make sure to acknowledge our own mortality and take the steps necessary to make our passing easier on those we would leave behind.  And, of course, since this blog is about investment operations and technology, ensure that your firm has the contingency planning, documentation, staff redundancy and training necessary to survive the loss of key personnel, whether that loss is through a sudden career change, a long-term illness, or an unexpected tragedy.

The impetus for some of the best client relationships I have ever had has been the vacuum created by the loss of personnel.  I have helped firms that experienced 100% turnover in their investment operations department rebuild, assisted those trying to make sense of cryptic documentation left behind by co-workers who left abruptly, and managed to get things running again when the person who “did everything” was severely injured in an automobile accident.

Understanding your firm’s dependancy on key personnel is very important.  Even when systems are documented, that documentation’s usefulness may be questionable.  Documentation that hasn’t been reviewed and tested might be meaningful to those who created it, but not to those trying to use it to complete a process in the author’s absence.

Some of my clients have actually drafted letters to be delivered to their investors in the event of their deaths. Those letters are in their contingency plan – what’s in yours?

About the Author: Kevin Shea is President of InfoSystems Integrated, Inc. (ISI); ISI provides a wide variety of outsourced IT solutions to investment advisors nationwide.

For details, please visit isitc.com, contact Kevin Shea via phone at 617-720-3400 x202 or e-mail at kshea@isitc.com.

As more and more companies embrace Windows 7 as their new desktop standard, they are faced with the difficulties of getting Axys 3.x to run in a mixed environment of XP, Windows 7 and terminal server.  For those willing to make the leap, upgrading to Axys 3.8.5 is a best practice.  It’s Windows 7 compatible and should take much of the guesswork and troubleshooting out of making Axys work in a mixed OS environment.

A couple weeks ago, I was sitting with some clients, discussing the merits of moving to 3.8.5 now or early next year.  I let them know that Advent would likely announce a sunset of 3.5.1 and 3.6 later this year.  They were still using Axys 3.6 and knew they needed to eventually move to Axys 3.8.5 to stay current.  In our meeting, we reviewed the benefits of making the move, which included the various report updates, as well as compatibility updates for Adobe Acrobat 10, Office 2010, Windows 7, and Windows Server 2008.  They decided to upgrade to Axys 3.8.5 immediately.

To learn more about what upgrading may mean for your firm, read my blog titled “What Version of Axys Should Your Firm Use?

As our meeting ended, they coincidentally received an email from Advent announcing the sunset of Axys 3.5.1 and 3.6 support.  According to the announcement, Advent will work with all Axys 3.5.1 and 3.6 clients on migrating to 3.8.5 by May 31st, 2012, at which point they will no longer support Axys 3.5.1 and 3.6.  It states that DTCC 3.5.1 is only compatible with Axys 3.5.1, so DTCC users should upgrade to DTCC 3.8.5 in tandem, and also recommends that DTCC users seek Advent’s assistance to ensure a smooth transition.  Advent encourages Axys 3.7 users to upgrade, but will continue to support Axys 3.7 until further notice.

In our experience, upgrading to Axys 3.8.5 has been relatively easy.  However, since Axys 3.7 and prior versions’ data needs to be converted to 3.8.x format, the process is slightly more difficult and potentially problematic than other recent upgrades.  The data format change can cause compatibility issues with products that interface with Axys, so users should check with their vendors prior to upgrading.  There is no need to do incremental upgrades.  For example, users can upgrade from Axys 3.6 to Axys 3.8.5 directly.

The only difficulty we ran into with this particular upgrade was that the pesky User Account Control (UAC) feature on Windows 7 PCs needed to be disabled – good riddance – in order for Axys to work properly.  In this case, the upgrade was at the upper end of our 2-4 hour estimate, but upgrade times vary based on the amount of data, users, system speed, customizations and possible exceptions.  Though we haven’t run into any unanticipated exceptions yet, it is always good to plan for them.

About the Author:
Kevin Shea is President of InfoSystems Integrated, Inc. (ISI); ISI provides a wide variety of outsourced IT solutions to investment advisors nationwide. For details, please visit isitc.com or contact Kevin Shea via phone at 617-720-3400 x202 or e-mail at kshea@isitc.com.

In an earlier blog I emphasized the importance of mainstream client reporting.  As investment professionals once again turn to the dreaded task of busily cranking out their quarterly reports, it is relevant to share the process we have established to help many of them transition from tired, stale reports to a new generation of client reports. 

In this article, I’ll take you through our process for overhauling client reporting drawing upon specific references to a recent project. Whether you opt to utilize a third-party service provider like us, request Report Writing services from Advent, or produce your next generation client reports internally, you should find the following information useful.  Those that want to implement new reports for Q3 or Q4 of 2011 need to start the process now.

Our Process for Improving Client Reporting

Our fundamental approach addresses the most difficult reporting issues first, identifying any show-stopping problems as early in the process as possible.  We are able to create reports using a number of techniques.  If one way doesn’t work, we can always fall back on another, but our goal is to select the right method from the get-go.

1. Review

In the review stage, advisors need to appraise their current client reporting packages with a critical eye in order to identify what is good and bad about them.  In a nutshell, investors must preserve what is highly valued by clients and remove what is superfluous. The ultimate goal should be to create concise, comprehensive reports that are easily understood, allowing clients to view as little or as much detail as they desire.  Many advisors want to create visually crisp and professional reporting packages.  We understand the importance of this;  however, in the area of client reporting, meaningful content should trump form.

Though we are available and qualified to review client reports and make recommendations for new ones, most firms prefer to do this internally. 

2. Mock-up

A new report always starts with an idea.  Oftentimes, this is shown with a mock-up expressing the look of the desired end product.  In some cases, our customers produce mockups in Excel, but others cut and paste pictures together, or simply sketch them freehand.  Any of these options are fine.  As they say, a picture says a thousand words:  the more detailed the pictures, the less you will have to explain to those writing the reports. 

Most clients have a strong preference as to whether reports appear in landscape or portrait. This aspect of your reports will be more expensive to change as you progress further into the project.  We understand that this decision may have more to do with aesthetic presentation issues, but some report layouts simply require more vertical space or horizontal space than others.  If you are dead-set on a certain orientation, you may need to be more flexible about report content.

Over the years, we have created a wide variety of quarterly reporting packages for clients. Some samples of our work that may help you with your mockup appear on our website under the menu titled “Custom Reports for Axys/APX.”  They fall into three categories:

1 – samples of reports produced by extracting data from Axys/APX and generating reports through traditional report writers like Crystal Reports and SSRS

2 – samples generated directly from Axys/APX through the use of compound report macros

3 – older samples of reports that were generated through a variety of methods

While browsing these above samples, click on any report to view it in larger size.

After viewing all of our online samples and PDF documents, our client produced the following mock-ups for us:

3. Draft

The draft process, as we define it, is one where the reports’ framework is established in the chosen environment.  Roughing out the reports helps determine their feasibility. In the attached example, we started by spending a day onsite, drafting the four account summary-type reports that were requested.   We used a combination of REPLANG, Report Writer Pro, and compound report macros. During this phase of the process, we are not overly concerned about individual details. Instead, we focus on the big picture. Is it possible to create the reports requested? What type of challenges will we face? What tools will be required? What resources, including time, will be required?

There are two possible outcomes to this stage:

  • Validation that the reports can be produced in the selected environment, as well as a better understanding of what they will look like and how much time they will take
  • A recommendation for another methodology, such as SSRS or Crystal Reports, based on the difficulties encountered in attempts to draft the basic report framework

After drafting the four requested summary reports, we were in a better position to estimate the amount of time necessary for development, knew what features would be difficult to implement, and were confident that we could deliver the reports on time.  Our client was also included in the process.  As we drafted each report, we sought their feedback to determine whether things were taking shape as intended.

4. Design

A significant amount of time needs to be spent in the design phase, selecting fonts, styles, colors, chart details, and other elements of presentation related to the reports.   Our client preferred to use the traditional Times New Roman font, but this font choice is one of the reasons most Axys and APX reports look so similar. We selected title bars rather than title boxes to give added flexibility regarding the placement and size of report elements.  Colors are very important. In the past, I have seen clients struggle to pick a palette of colors for charts and graphs. Our client picked vibrant colors that complemented their logo. If you are not already familiar with it, Adobe has a very useful and free resource that you can use to select a color scheme for your reports:

 http://kuler.adobe.com

As a general rule, one should complete design of the master page or default style for all reports before moving on to the next phase.  Report writers and developers are not necessarily graphic designers.  You can save your staff or vendor a lot of grief by having your color schemes selected and logos produced by professional designers.  In particular, your designer should produce images of the proper size, format and quality required.

5. Build & Test

We minimize formatting and style changes by beginning work in this phase only when a client has committed to a design specification.  Ideally, we wouldn’t make any changes to design once we have begun the build phase, but some customers change their minds between the design and build phases.  We also occasionally run into difficulties with pieces of the implementation process or come up with a better way to design something in the process of its implementation.

No matter how a report is created, the formatting of the first in a series of client reports to match the design layout is the most difficult.  However, once the initial report is completed, the rest of the reports come together much faster. The bulk of the time on your project will likely be spent on implementation.  This time depends on the number and complexity of reports you plan to produce, and the resources available.  It will likely take days, if not weeks.

In initial testing, we run reports for a small control group that represents the client’s various types of accounts. We also do a number of report runs for the full group of reports that will be run at quarter end. We find that doing full-scale tests is the best way to identify exceptions and deal with them proactively. As we find issues with individual reports, we apply fixes to address them, and must test again to validate the fixes.

In the example below, our client did a great job illustrating exactly what they wanted and let us focus on producing the report.

Account Summary Mock-up

The final report that we created based on our client’s mock-up shown above follows:

To see other samples of the final reports click here.

It took roughly 30 days to produce the final versions of our customer’s four account summary reports.  The customer was very engaged in the process and highly motivated, facilitating progress by providing quick responses to our questions.   Similar projects take 4-6 weeks, but could take significantly less time if you are working from established reports that just need modification.  You may remember that our initial draft took a day; we spent the rest of the time working on the more difficult aspects of the project.  Our summary reports brought data that needed verification into focus.  Based on exception testing and other issues, we made our final modifications to the reports’ appearance.

The project referenced in this article included new custom reports, quarterly packaging automation, integration of new custom reports, and conversion of legacy packaging to our new report packaging environment.  The project’s total cost was about 20k, nearly double what it would have been with our preexisting custom reports, but the only recurring cost is maintenance.  Many of today’s alternatives feature a sizable implementation cost and significant monthly fees.

Improving your client reporting is one of the most important things you can do to communicate more effectively.  Your next generation of quarterly statements should make it clear to your clients that you are investing in a process that directly benefits them.  If you do it right, you are bound to receive positive feedback from your clients once they have your new reports in hand.

There is no time like the present to start working on your next generation of client reports.

About the Author:
Kevin Shea is President of InfoSystems Integrated, Inc. (ISI); ISI provides a wide variety of outsourced IT solutions to investment advisors nationwide. For details, please visit isitc.com or contact Kevin Shea via phone at 617-720-3400 x202 or e-mail at kshea@isitc.com.