Part 8BMarket Participants—Critical Business Services, Information Security and Business Continuity Plans

Chapter 8B: Market Participants—Critical Business Services, Information Security and Business Continuity Plans

Part 8B.1 Application and Definitions

8B.1.1 Application of Chapter

This Chapter applies to Market Participants.

8B.1.2 Definitions

Business Continuity Plans has the meaning given by Rule 8B.4.1.

Critical Business Services, in relation to a Market Participant, means functions, infrastructure, processes or systems which in the event of failure to operate effectively, would or would be likely to cause significant disruption to the Market Participant’s Participant Operations or materially impact the Market Participant’s Participant Services.

Note: Critical Business Services referred to in this definition would generally include but are not limited to, functions, infrastructure, processes and systems that deliver or support order acceptance, routing and entry, clearing and settlement of transactions, payments and deliveries of financial products and funds, accounting for or reconciling client money, trust accounts, securities and funds, confirmations and regulatory data reporting.

Critical Business Services Arrangements has the meaning given by Rule 8B.2.1.

Information Asset means information and information technology, including software, hardware and data (both soft and hard copy).

Major Event has the meaning given by Rule 8B.4.1.

Outsourcing Arrangement means an arrangement between a Market Participant and another person (Service Provider) under which the Service Provider will provide, operate or support one or more of the Market Participant’s Critical Business Services.

Participant Operations, in relation to a Market Participant, means the operations, activities or conduct of the Market Participant in connection with each Market of which it is a Participant.

Participant Services, in relation to a Market Participant, means the services provided by the Market Participant in connection with each Market of which it is a Participant.

Service Provider: has the meaning given in the definition of Outsourcing Arrangement.

Part 8B.2 Critical Business Services

8B.2.1 Resilience, reliability, integrity and security

Adequate arrangements

(1) A Market Participant must have adequate arrangements (Critical Business Services Arrangements) to ensure the resilience, reliability, integrity and security of its Critical Business Services.

Note: Arrangements referred to in subrule (1) would generally include, but are not limited to, policies, procedures and organisational resources including financial, human and technological resources.