Document ID: chunk:federal_register_of_legislation:F2024C01109:reg:4:p16
Version: federal_register_of_legislation:F2024C01109
Segment Type: reg
Provision Reference: reg 4 (pt 16/34)
Character Range: 162215–165384

in relation to a Market operator, means the services, data and associated products provided by the Market operator in connection with the Market operator's Market.
Outsourcing Arrangement means an arrangement between a Market operator and another person (Service Provider) under which the Service Provider will provide, operate or support one or more of the Market operator's Critical Business Services.
Service Provider: has the meaning given in the definition of Outsourcing Arrangement.

Part 8A.2 Trading controls

8A.2.1 Market operator to have trading controls
A Market operator must have controls, including automated controls, that enable immediate suspension, limitation or prohibition of the entry by a Market Participant of Trading Messages where required for the purposes of ensuring the Market is fair, orderly and transparent.

Part 8A.3 Critical Business Services

8A.3.1 Resilience, reliability, integrity and security
Adequate arrangements
(1) A Market operator must have adequate arrangements (Critical Business Services Arrangements) to ensure the resilience, reliability, integrity and security of its Critical Business Services.
Note: Arrangements referred to in subrule (1) would generally include, but are not limited to, policies, procedures and organisational resources including financial, human and technological resources.
(2) Without limiting subrule (1), a Market operator's Critical Business Services Arrangements must include arrangements for:
(a)        identifying Critical Business Services; and
(b)       identifying, assessing, managing and monitoring for any risks to the resilience, reliability, integrity and security of Critical Business Services; and
(c)        ensuring Critical Business Services have sufficient and scalable capacity for ongoing and planned Market Operations and Market Services; and
(d)       preventing unauthorised access to or use of Critical Business Services; and
(e)        managing the implementation of new Critical Business Services and of changes to existing Critical Business Services in accordance with Rule 8A.3.2; and
(f)        dealing with a Major Event in accordance with Part 8A.5 of these Rules; and
(g)       managing Outsourcing Arrangements in relation to Critical Business Services in accordance with Rule 8A.3.3.
Review and change of arrangements
(3) A Market operator must undertake a review of its Critical Business Services Arrangements:
(a)        following each material change to its Critical Business Services; and
(b)       at least once every 12 months,
and apply recommended changes to the Critical Business Services Arrangements arising from the review to ensure they comply with subrules (1) and (2).
Documentation of arrangements
(4) A Market operator must document:
(a)        its Critical Business Services Arrangements; and
(b)       the scope and results of each review performed in accordance with subrule (3); and
(c)        any changes applied to the Critical Business Services Arrangements as a result of the review or otherwise,
and must maintain that documentation for a period of at least seven years from the later of the date it is created or the date it is