IOSCO publishes review of business continuity planning in trading venues and market intermediaries

Published: Friday, 07 May 2021 08:32

The Board of the International Organization of Securities Commissions (IOSCO) has published a Thematic Review on the extent to which participating IOSCO member jurisdictions have implemented regulatory measures consistent with the two Recommendations and the two Standards set out in the 2015 IOSCO reports on business continuity plans for trading venues and market intermediaries.

Authorities from 33 jurisdictions (16 developed jurisdictions and 17 emerging market jurisdictions) participated in the review, which found that thirteen participating jurisdictions are Fully Consistent with the two Recommendations and the two Standards under review. The review identified some gaps or shortcomings of different degrees of materiality in the other 20 participating jurisdictions for one or more of the Recommendations or Standards.

The two Recommendations under review state that regulators should require trading venues to:

The two Standards state that regulators should require intermediaries to:

In terms of the gaps, the review found that regulatory frameworks of some jurisdictions did not ensure that relevant provisions for critical systems extend to outsourced functions. The review also found that regulations in some participating jurisdictions did not have any obligations for intermediaries to conduct a regular review of BCP arrangements or update BCPs in response to material business changes.

The review recommends that members include in their regulatory frameworks the necessary powers for the regulator to set and enforce requirements for trading venues and intermediaries when they establish, maintain and update business continuity plans; to ensure the regulatory frameworks require enterprise-wide BCPs and not only disaster recovery or contingency measures for IT systems; and to provide sufficient clarity on governance and accountability for boards or senior management in relation to critical systems. 

IOSCO undertook this Review in response to the rapid rise of new technologies in securities markets, which have created risks capable of potentially disrupting trading venues and intermediaries. These vulnerabilities underscore the importance of effective business continuity plans, supported by adequate regulatory frameworks.

While the report also discusses the measures that regulators, trading venues and market intermediaries took to ensure BCPs remained resilient during the COVID-19 crisis, the Review did not assess the operational resilience of trading venues and intermediaries during the COVID-19 pandemic. Given the relevance of this topic, IOSCO will be separately conducting work on operational resilience as part of its effort to examine risks exacerbated by the COVID-19 pandemic, as announced in its work program for 2021-2022.

Read the 'Thematic Review on Business Continuity Plans with respect to Trading Venues and Intermediaries: Final Report' (PDF).