What it means
Large financial firms often do several jobs at once. A single bank may advise a company on a takeover, trade shares in that same company, publish research on it and manage investments for clients.
If these teams could freely share what they know, the firm could misuse confidential information or put its own interests ahead of its clients. A firewall is the set of rules and physical or electronic controls that keeps these teams apart.
Typical measures include separate floors or locked areas, restricted access to shared drives, secure email groups, and rules about who can talk to whom. The team holding confidential deal information is often called the private side, and the team dealing with public markets is called the public side.
When a person on the public side genuinely needs to know something confidential, for example to assess the firm's risk, they can be formally brought over the wall. That process is controlled by compliance staff, recorded in writing and usually places the person on a restricted list so they cannot trade in the securities concerned.
Without that discipline, a wall is only a label. Firewalls matter well beyond investment banks.
Accounting and law firms use them when they act for competing clients, and companies use them when different departments hold sensitive commercial data. In each case the aim is the same, which is to protect confidential information and to show regulators and clients that conflicts are managed.
A firewall is only as good as the culture behind it. Regulators look for evidence that staff are trained, that breaches are reported and that access is monitored.
Documented, tested controls are far more convincing than a policy that has never been checked.
In practice
Real-world examples.
Example
An investment bank advises a manufacturer on buying a competitor, while its research team covers the competitor's shares. The deal team sits behind an information barrier, so analysts cannot see the plans and cannot be influenced by them.
Example
A law firm is asked to act for a company in a dispute with another business that is already one of its clients. It sets up separate teams, restricts file access and agrees written rules, so that neither client's information is shared. Each team signs an undertaking not to discuss the matter with the other, and the firm's compliance staff check the arrangement at regular intervals.
Example
A large corporate group has a treasury team that sees details of upcoming acquisitions. The company restricts access to those files and records who has seen them, so that people who might trade in the company's shares cannot learn of the deals early. Anyone who must see the files signs a confidentiality notice first.
Case study
Seen in the real world.
Granite Hill Securities is a fictional broker that advises companies on mergers and also trades shares for clients. When one of its advisers began work on a confidential takeover, compliance staff put the deal on a restricted list and locked the project's files. Only eight named people had access.
During the deal, a trader asked a colleague about rumours concerning the target company. In this illustrative case, the colleague refused to discuss it and reported the conversation to compliance, which recorded it and reminded the trader of the rules. Compliance also ran a surveillance review comparing staff trading records against the restricted list to confirm nobody had crossed the line. The wall held, the takeover was announced as planned, and the firm could show regulators exactly who knew what and when. The log of access and the written record of the trader's conversation became the evidence that the controls worked.
Watch out
Common mistakes.
- Thinking a firewall is just a policy document. Without access controls, training and monitoring, regulators will treat it as a paper exercise.
- Letting senior staff cross the barrier informally because they are trusted. Informal leaks are a common route to insider trading allegations, and each crossing should be authorised and recorded.
- Assuming a firewall removes the conflict. It manages the conflict, and some conflicts are serious enough that the firm must still disclose them or decline the work.
Questions
People also ask.
Is a firewall the same as a Chinese wall?
Yes. Both terms describe an information barrier between departments, although many firms now prefer information barrier or ethical wall as more neutral wording.
Is it the same as a network firewall?
No. A network firewall is a computer security tool that filters traffic, while a financial firewall is an organisational control over information and conflicts. The two are often used together to protect data.
What does being wall-crossed mean?
It means a person has been given confidential information for a specific purpose, usually with compliance approval, and is placed under trading restrictions until the information becomes public or irrelevant.
From the founder's library
Take it further with the book.
Build your financial confidence beyond this definition. Shihan's full-length guide, Accounting Fundamentals, takes the same plain-English approach and turns it into a complete, practical playbook for non-finance managers, business owners and students - with chapter-end quiz answers and presentation slides included.
25% off with code MMHQ25, applied at checkout. Priced in USD - checkout may show the equivalent in your local currency.
View the book and save 25%Related