SMF16 vs SMF17: When You Need One, Both, or a Combined Role

uently confused Senior Management Functions are SMF16 and SMF17. Both sit in the compliance and financial-crime space, both are required at most authorised firms, and at smaller firms they are often held by the same person. But they are distinct functions with distinct accountabilities, and getting the structure right — one role, both, or a single individual holding both — matters for how a firm is governed and how it recruits. This article sets out the difference, when each is required, and how to approach hiring for them.

Exec Capital runs SMF16 compliance oversight and MLRO (SMF17) searches for authorised firms — both as standalone appointments and as combined roles — as retained, research-led mandates led personally by the founder.

What SMF16 Is

SMF16 is the compliance oversight function. It is the Senior Management Function held by the individual responsible for the firm’s compliance with the regulatory system — overseeing the compliance function, advising the governing body on the firm’s regulatory obligations, and reporting to the board on how the firm is meeting them. At most authorised firms it is a required function, and the holder is commonly the head of compliance or compliance director.

The SMF16 is accountable for the firm having an effective compliance function and for the board being properly informed about the firm’s regulatory position. It is a prescribed responsibility under SM&CR, and like every Senior Management Function the holder must be approved, is assessed as fit and proper, holds a Statement of Responsibilities, and is bound by the Conduct Rules and the Duty of Responsibility.

What SMF17 Is

SMF17 is the money laundering reporting officer (MLRO) function. It is the Senior Management Function held by the individual with responsibility for the firm’s anti-money-laundering systems and controls and for oversight of its compliance with the Money Laundering Regulations and the relevant parts of the FCA’s rules. The MLRO is the point of responsibility for the firm’s financial-crime framework — suspicious activity reporting, the firm’s AML risk assessment, and the operation of its controls.

The SMF17 is distinct from the compliance oversight function because financial crime is a specific, high-stakes area of regulatory risk with its own legal framework. The MLRO carries personal responsibility for the firm’s AML arrangements, and in many firms is also the nominated officer for the purposes of the Proceeds of Crime Act. Like SMF16, it is a function the holder must be approved for, assessed as fit and proper, and accountable for under a Statement of Responsibilities.

SMF Capital treats the two functions together in its guide to SMF16, SMF17 and the compliance-oversight and MLRO functions, and its guide to compliance monitoring explains how the compliance function’s monitoring programme actually operates — the substance behind the SMF16’s accountability.

One Role, Both, or Combined?

When a firm needs both as separate roles

At larger or more complex firms, the compliance oversight and MLRO functions are usually held by different individuals. The volume and specialism of financial-crime work justifies a dedicated MLRO, and separating the functions avoids concentrating too much regulatory accountability in one person. Where a firm has a material financial-crime risk profile — payments, crypto, money remittance, high-volume retail — a dedicated, experienced MLRO is often essential rather than optional.

When one individual can hold both

At smaller authorised firms it is common, and entirely legitimate, for one individual to hold both SMF16 and SMF17. The firm must be satisfied that the individual has the capacity and the expertise to discharge both functions, and that combining them does not create a conflict or stretch the person beyond what they can properly oversee. For many small firms — a boutique asset manager, a small broker, a directly authorised adviser — a single experienced compliance professional holding both functions is the right and proportionate structure. Exec Capital runs combined SMF16/SMF17 searches for exactly this.

When a fractional or interim holder makes sense

Smaller firms frequently do not need a full-time compliance oversight function or MLRO, but they do need a named, approved individual who genuinely discharges the role. A fractional or part-time holder — a part-time compliance officer or fractional MLRO — can hold the function provided the arrangement gives them real responsibility and the regulator is satisfied they can discharge it. Where a function falls vacant and needs covering at short notice, interim SMF cover keeps the firm compliant while a permanent appointment is made.

What the Firm Is Really Hiring

For either function, the firm is hiring regulatory accountability as much as technical skill. A strong compliance analyst is not the same as someone who can hold SMF16 and own the compliance function’s accountability to the board and the regulator. An experienced AML specialist is not automatically approvable as an MLRO. The distinction is between doing compliance or financial-crime work and being the person the regulator holds responsible for it.

• For SMF16: the standing to own the firm’s compliance with the regulatory system and to advise and report to the board on it;
• For SMF17: command of the firm’s financial-crime risk and the AML framework, and the authority to act as the point of responsibility for it;
• For either: the regulatory credibility to be assessed as fit and proper for the function;
• An understanding of the firm’s permissions, business model and risk profile proportionate to the role;
• The judgement and temperament to discharge the Duty of Responsibility rather than treat the title as nominal.

Both functions work closely with the firm’s governing functions — the chief executive (SMF1) and the chief finance function (SMF2) — and at many firms the compliance oversight function reports to the board through a specified channel. A compliance or financial-crime leader who understands how their accountability fits with the rest of the governance structure is worth more than one who treats the function in isolation.

How to Run the Search

Compliance and MLRO searches reward a structured, research-led approach into a defined specialist pool. The strongest candidates are usually in post, and the pool of individuals who combine genuine regulatory expertise with the standing to hold a Senior Management Function is narrower than the pool of compliance professionals in general. The brief should be explicit from the outset about the firm’s permissions, its risk profile, and whether the appointment is a standalone SMF16, a standalone SMF17, a combined role, or a fractional arrangement.

Exec Capital runs these as retained searches. Briefing establishes the firm’s regulatory status and the exact scope of the function or functions to be held; research maps candidates with the right specialism and the standing to hold the role; approach and assessment test both regulatory expertise and fitness and propriety; and the shortlist carries assessment commentary. We support the firm through interviews, offer, the Statement of Responsibilities and the regulatory approval process.

Frequently Asked Questions

Can the same person hold SMF16 and SMF17?

Yes. At many smaller authorised firms a single individual holds both the compliance oversight and MLRO functions, provided the firm is satisfied they have the capacity and expertise to discharge both and that doing so does not create a conflict. At larger or higher-risk firms the functions are usually separated.

Does a small firm really need a dedicated MLRO?

Every firm within scope of the Money Laundering Regulations needs a named individual responsible for its AML arrangements. For a small firm that may be the same person who holds the compliance oversight function, and it may be a fractional or part-time arrangement — but it must be a genuine appointment of an approved, fit-and-proper individual, not a title held in name only.

Can SMF16 or SMF17 be held on a fractional basis?

Yes, where the arrangement gives the holder real responsibility for the function and the regulator is satisfied they can discharge it. Fractional and interim compliance oversight and MLRO arrangements are common at smaller firms and for covering a vacancy while a permanent appointment is made.

Sources and Further Reading

• FCA — Senior Managers and Certification Regime
• FCA Handbook — SUP 10C (FCA senior management functions)
• The Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017