Rethinking M&S From the Ground Up
The practical, commercially sensible blueprint that replaces the old five-file model
In Part 1, ‘The Myth of the Five Files’, we called out the problem of how the traditional ‘five files per adviser’ model gives AFSLs a false and dangerous sense of comfort.
Now let’s talk about the solution.
The alternative is not more admin, more cost, more templates or more technology. It’s clarity. And that clarity comes from reframing M&S from ‘audit activity’ to business assurance.
M&S is not an audit function. It’s a risk-prediction engine.
Often, high-performing AFSLs think of monitoring the way pilots think of cockpit dashboards. That is, they’re not waiting for turbulence - they’re identifying conditions that lead to turbulence.
Modern M&S does the same. It tells you:
Where advice quality is stagnating
Which advisers need coaching and support
Which products or strategies are producing inconsistent outcomes
Where processes are silently breaking
Where operational leading indicators (for example, OFA delivery slippage or delayed SOA issuance) expose emerging risk early
Where the next remediation event is likely to emerge
This is how you turn M&S from a tick-box into a competitive advantage.
Instead of relying on one blunt tool (file audits), modern AFSLs use a multi-dimensional model.
Pre-vetting for high-risk scenarios as a preventative opportunity
Post-advice reviews based on adviser risk scores, enabling you to focus resources in areas of higher risk vs one size fits all
Thematic deep dives on emerging hotspots and using these insights to develop improvement action plans to mitigate future risk
Risk and compliance meetings that ask deeper questions around major risk issues, rather than simply going through the motions
Some businesses add advice process observation, AI‑powered triage, or targeted checks that identify when advice practices start to drift from expected standards. But the point isn’t the method - it’s using multiple lenses to see the full picture.
Why this approach costs less and delivers more
When you move to a risk‑based model:
High-performers stop being over‑audited
Higher-risk advisers get the right level of oversight
Red flags appear earlier
Coaching becomes targeted
Training becomes strategic
File review volumes drop, but quality increases
Most importantly, you stop trying to fix symptoms and start fixing causes. The fence is created at the top of the cliff, saving you countless hours and dollars at the bottom.
The thing no one tells you - your reviewers need reviewing
Many advice businesses have internal reviewers (which is a great use of resources). However, very few have:
Quality Assurance (QA), checking the checker
Calibration and clear assessment guidance
Regularly updated question sets, as industry and client expectations change
A single agreed way of classifying issues
Clear rules of what constitutes severity
Bravery to be independent and to call issues as they see them
This is often why businesses confidently report ‘no major issues found’, while in the same breath, ASIC quickly finds material breaches. Essentially, a risk-based M&S program without QA is just a nicer version of the same problem.
Where AI fits and where it absolutely doesn’t
AI can be brilliant at highlighting patterns, identifying outliers or extracting evidence, but it cannot (yet) determine suitability, reasoning or client outcomes.
If your AI tool is producing colourful dashboards but not reducing rework, improving adviser capability, or strengthening controls, then it’s not actually helping. AI should make humans faster, not redundant. After all, quality advice still depends on individual client circumstances, which cannot be reduced to fixed algorithms.
What can rebuilding M&S the right way give you?
Having the right M&S in place can:
Reduce remediation incidents
Help advisers grow instead of repeating mistakes
Provide clearer insight for your Board
Decrease defensiveness while increasing capability
Create a licence that is robust and scalable
Support a compliance function that finally becomes predictive, not reactive
In other words, better advice, lower risk and lower cost of control - something that every owner and Responsible Manager wants.
Where to start?
Start with three steps:
Create an adviser risk score based on Key Risk Indicators (KRIs)
Replace your outdated checklist with a risk‑aligned set of questions and assessment guidance
Introduce QA + calibration for anyone who reviews files
A quiet word from Tangelo
This is exactly the type of work we live and breathe, designing M&S programs that are modern, practical, risk‑aligned and actually improve advice quality. If your current approach feels more like tradition than assurance, we’d love to help you rethink it. Book a conversation with our team here.