Document ID: chunk:federal_register_of_legislation:F2024C01109:reg:4:p22
Version: federal_register_of_legislation:F2024C01109
Segment Type: reg
Provision Reference: reg 4 (pt 22/34)
Character Range: 179036–182284

operator must document:
(a)        its Business Continuity Plans; and
(b)       the scope and results of all reviews and testing performed in accordance with subrule (8),

     and must maintain that documentation for a period of at least seven years from the later of the date it is created or the date it is last amended.

Part 8A.6 Governance

8A.6.1 Responsibility for compliance
(1) A Market operator must have appropriate governance arrangements and adequate financial, technological and human resources to comply with its obligations under this Chapter 8A.
(2) Without limiting subrule (1), the arrangements referred to in that subrule must include arrangements for the Market operator's Board or senior management to have oversight of the establishment, implementation, maintenance, review, testing and documentation of the Market operator's Business Continuity Plans.

Chapter 8B: Market Participants—Critical Business Services, Information Security and Business Continuity Plans

Part 8B.1 Application and Definitions

8B.1.1 Application of Chapter
This Chapter applies to Market Participants.

8B.1.2 Definitions
In this Chapter:
Business Continuity Plans has the meaning given by Rule 8B.4.1.
Critical Business Services, in relation to a Market Participant, means functions, infrastructure, processes or systems which in the event of failure to operate effectively, would or would be likely to cause significant disruption to the Market Participant's Participant Operations or materially impact the Market Participant's Participant Services.

           Note: Critical Business Services referred to in this definition would generally include but are not limited to, functions, infrastructure, processes and systems that deliver or support order acceptance, routing and entry, clearing and settlement of transactions, payments and deliveries of financial products and funds, accounting for or reconciling client money, trust accounts, securities and funds, confirmations and regulatory data reporting.
Critical Business Services Arrangements has the meaning given by Rule 8B.2.1.
Information Asset means information and information technology, including software, hardware and data (both soft and hard copy).
Major Event has the meaning given by Rule 8B.4.1.
Outsourcing Arrangement means an arrangement between a Market Participant and another person (Service Provider) under which the Service Provider will provide, operate or support one or more of the Market Participant's Critical Business Services.
Participant Operations, in relation to a Market Participant, means the operations, activities or conduct of the Market Participant in connection with each Market of which it is a Participant.
Participant Services, in relation to a Market Participant, means the services provided by the Market Participant in connection with each Market of which it is a Participant.
Service Provider: has the meaning given in the definition of  Outsourcing Arrangement.

Part 8B.2 Critical Business Services

8B.2.1 Resilience, reliability, integrity and security
Adequate arrangements
(1) A Market Participant must have adequate arrangements (Critical Business Services Arrangements) to ensure the resilience, reliability, integrity and security of