1. (1)

   A firm must have robust governance arrangements, which include a clear organisational structure with well defined, transparent and consistent lines of responsibility, effective processes to identify, manage, monitor and report the risks it is or might be exposed to, and internal control mechanisms, including sound administrative and accounting procedures and effective control and safeguard arrangements for information processing systems.8

2. (2)

   [deleted]

   1313

[Note: article 74 (1) of CRD, article 13(5) second paragraph of MiFID,12 article 12(1)(a) of the UCITS Directive, and article 18(1) of AIFMD12]10

14A full-scope UK AIFM must comply with the AIFM Remuneration Code.

14A full-scope UK AIFM must, in particular:

1. (1)

   have rules for personal transactions by its employees or for the holding or management of investments it invests on its own account;

2. (2)

   ensure that each transaction involving the AIFs may be reconstructed according to its origin, the parties to it, its nature, and the time and place at which it was effected; and

3. (3)

   ensure that the assets of the AIFs managed by the AIFM are invested in accordance with the instrument constituting the fund and the legal provisions in force.

15A BIPRU firm and a third country BIPRU firm must comply with the BIPRU Remuneration Code.

For a common platform firm, the 3 arrangements, processes and mechanisms referred to in SYSC 4.1.1 R must be comprehensive and proportionate to the nature, scale and complexity of the risks inherent in the business model and of13SYSC 4.1.7 R, SYSC 5.1.7 R ,8SYSC 7 and(for a firm to which SYSC 19A applies)13SYSC 19A, or (for a full-scope UK AIFM) SYSC 19B12.8

[Note: article 74 (2) of CRD13]

Where SYSC 4.1.2 R applies to a BIPRU firm, it must take into account the specific technical criteria described in SYSC 19C.

10For a management company or a full-scope UK AIFM14, the arrangements, processes and mechanisms referred to in SYSC 4.1.1 R and SYSC 4.1.1A R14 must also take account of the UCITS schemes and EEA UCITS schemes managed by the management company or the AIFs managed by the full-scope UK AIFM14.

10A management company, a full-scope UK AIFM and an incoming EEA AIFMbranch14 must have, and employ effectively, the resources and procedures that are necessary for the proper performance of its business activities.

14A full-scope UK AIFM must use, at all times, adequate and appropriate human and technical resources that are necessary for the proper management of AIFs.

A firm (with the exception of a sole trader who does not employ any person who is required to be approved under section 59 of the Act (Approval for particular arrangements))3 must, taking into account the nature, scale and complexity of the business of the firm, and the nature and range of the financial services and activities 3undertaken in the course of that business:

1. (1)

   (if it is a common platform firm or a management company)10 establish, implement and maintain decision-making procedures and an organisational structure which clearly and in a documented manner specifies reporting lines and allocates functions and responsibilities;

   3
2. (2)

   establish, implement and maintain adequate internal control mechanisms designed to secure compliance with decisions and procedures at all levels of the firm;

   10
3. (3)

   (if it is a common platform firm) 3establish, implement and maintain effective internal reporting and communication of information at all relevant levels of the firm; and10

4. (4)

   10(if it is a management company) establish, implement and maintain effective internal reporting and communication of information at all relevant levels of the management company as well as effective information flows with any third party involved.

[Note: articles 5(1) final paragraph, 5(1)(a), 5(1)(c) and 5(1)(e) of the MiFID implementing Directive and articles 4(1) final paragraph, 4(1)(a), 4(1)(c) and 4(1)(d) of the UCITS implementing Directive]10

A MiFID investment firm and a management company10 must establish, implement and maintain systems and procedures that are adequate to safeguard the security, integrity and confidentiality of information, taking into account the nature of the information in question.

[Note:

article 5(2) of the MiFID implementing Directive and article 4(2) of the UCITS implementing Directive]10

A common platform firm must take reasonable steps to ensure continuity and regularity in the performance of its regulated activities. To this end the common platform firm3 must employ appropriate and proportionate systems, resources and procedures.

[Note: article

13(4) of MiFID]

A common platform firm and a management company10 must establish, implement and maintain an adequate business continuity policy aimed at ensuring, in the case of an interruption to its systems and procedures, that any losses are limited, the preservation of essential data and functions, and the maintenance of its regulated activities, or, in the case of a management company, its collective portfolio management activities,10 or, where that is not possible, the timely recovery of such data and functions and the timely resumption of those activities.10

[Note:

article 5(3) of the MiFID implementing Directive,10 annex V paragraph 13 of the Banking Consolidation Directive, article 4(3) of the UCITS implementing Directive and article 85(2) of the CRD11]10

16An operator of an electronic system in relation to lending must take reasonable steps to ensure that arrangements are in place to ensure that P2P agreements facilitated by it will continue to be managed and administered, in accordance with the contract terms, if at any time it ceases to carry on the activity of operating an electronic system in relation to lending.

16Any arrangements made under SYSC 4.1.8A R must be notified to lenders under P2P agreements:

1. (1)

   when such arrangements are made; or

2. (2)

   if later, when the lender first becomes a lender under a P2P agreement with that operator; or

3. (3)

   if the arrangements are changed, when that change is made; and

4. (4)

   if the arrangement involves another firm taking over the management and administration of P2P agreements if the operator ceases to operate the electronic system in relation to lending, the notification to lenders must inform lenders of the identity of the firm with which the arrangements have been made and how that firm will hold the lenders' money.

16An operator of an electronic system in relation to lending must not accept, take, or receive the transfer of full ownership of money relating to P2P agreements.

A common platform firm and a management company10 must establish, implement and maintain accounting policies and procedures that enable it, at the request of the appropriate regulator, to deliver in a timely manner to the appropriate regulator financial reports which reflect a true and fair view of its financial position and which comply with all applicable accounting standards and rules.

[Note:

article 5(4) of the MiFID implementing Directive and article 4(4) of the UCITS implementing Directive]10

A common platform firm and a management company10 must monitor and, on a regular basis, evaluate the adequacy and effectiveness of its systems, internal control mechanisms and arrangements established in accordance with SYSC 4.1.4 R to SYSC 4.1.9 R and take appropriate measures to address any deficiencies.

[Note:

article 5(5) of the MiFID implementing Directive and article 4(5) of the UCITS implementing Directive]10

The senior personnel of a common platform firm, a management company3, a full-scope UK AIFM,5 or of the UK branch of a non-EEA bank1must be of sufficiently good repute and sufficiently experienced as to ensure the sound and prudent management of the firm.

[Note: article 9

(1) of MiFID, article 7(1)(b) of the UCITS Directive3 article 8(1)(c) of AIFMD5, article 11(1) second paragraph of the Banking Consolidation Directive and article 13(1) of the CRD4]

7For a full-scope UK AIFM, the senior personnel must, in complying with SYSC 4.2.1 R, be sufficiently experienced in relation to the investment strategies pursued by the AIFs it manages.

A common platform firm, a management company, a full-scope UK AIFM53 and the UK branch of a non-EEA bank1must ensure that its management is undertaken by at least two persons meeting the requirements laid down in SYSC 4.2.1 R and

, for a full-scope UK AIFM, SYSC 4.2.7 R5.

[Note: article 9(4) first paragraph of MiFID, article 7(1)(b) of the UCITS Directive3, article 8(1)(c) of AIFMD5and article 13(1) of CRD]

If a common platform firm, (other than a credit institution or AIFM investment firm5) or the UK branch of a non-EEA bank1, is:

1. (1)

   a natural person; or

2. (2)

   a legal person managed by a single natural person;

it must have alternative arrangements in place which ensure sound and prudent management of the firm.

[Note: article 9(4) second paragraph of MiFID]

A full-scope UK AIFM must notify the FCA of the names of the senior personnel of the firm and of every person succeeding them in office.

Afirm (with the exception of a sole trader who does not employ any person who is required to be approved under section 59 of the Act (Approval for particular arrangements)),2 when allocating functions internally, must ensure that senior personnel and, where appropriate, the supervisory function, are responsible for ensuring that the firm complies with its obligations under the regulatory system1. In particular, senior personnel and, where appropriate, the supervisory function must assess and periodically review the effectiveness of the policies, arrangements and procedures put in place to comply with the firm's obligations under the regulatory system1 and take appropriate measures to address any deficiencies.

[Note:

article 9(1) of the MiFID implementing Directive and articles 9(1) and 9(3) of the UCITS implementing Directive]4

A common platform firm1(with the exception of a sole trader who does not employ any person who is required to be approved under section 59 of the Act (Approval for particular arrangements))2 and a management company,4 must ensure that:2

1. (1)

   its senior personnel receive on a frequent basis, and at least annually, written reports on the matters covered by SYSC 6.1.2 R to SYSC 6.1.5 R, SYSC 6.2.1 R and SYSC 7.1.2 R, SYSC 7.1.3 R and SYSC 7.1.5 R to SYSC 7.1.7 R, indicating in particular whether the appropriate remedial measures have been taken in the event of any deficiencies; and

   2
2. (2)

   the supervisory function, if any, receives 2on a regular basis written reports on the same matters.

   [Note:

   article 9(2) and article 9(3) of the MiFID implementing Directive and articles 9(4) and 9(6) of the UCITS implementing Directive]4

   2

2In SYSC 4.3A.6 R and SYSC 4.3A.8 R a ‘CRR firm that is significant’ means a significant IFPRU firm.

1A CRR firm must ensure that the management body defines, oversees and is accountable for the implementation of governance arrangements that ensure effective and prudent management of the firm, including the segregation of duties in the organisation and the prevention of conflicts of interest. The firm must ensure that the management body:

1. (1)

   has overall responsibility for the firm;

2. (2)

   approves and oversees implementation of the firm's strategic objectives, risk strategy and internal governance;

3. (3)

   ensures the integrity of the firm's accounting and financial reporting systems, including financial and operational controls and compliance with the regulatory system.

4. (4)

   oversees the process of disclosure and communications;

5. (5)

   has responsibility for providing effective oversight of senior management.

6. (6)

   monitors and periodically assesses the effectiveness of the firm's governance arrangements and takes appropriate steps to address any deficiencies.

[Note: article 88(1) of

CRD]

A CRR firm must ensure that the chairman of the firm's management body does not exercise simultaneously the chief executive function within the same firm, unless justified by the firm and authorised by the appropriate regulator.

[Note: article 88(1)(e) of

CRD]

A CRR firm must ensure that the members of the management body of the firm:

1. (1)

   are of sufficiently good repute;

2. (2)

   possess sufficient knowledge, skills and experience to perform their duties;

3. (3)

   possess adequate collective knowledge, skills and experience to understand the firm's activities, including the main risks;

4. (4)

   reflect an adequately broad range of experiences;

5. (5)

   commit sufficient time to perform their functions in the firm; and

6. (6)

   act with honesty, integrity and independence of mind to effectively assess and challenge the decisions of senior management where necessary and to effectively oversee and monitor management decision-making.

[Note: article 91(1)-(2) and (7)-(8) of

CRD]

A CRR firm must devote adequate human and financial resources to the induction and training of members of the management body.

[Note: article 91

(3) of CRD]

A CRR firm must ensure that the members of the management body of the firm do not hold more directorships than is appropriate taking into account individual circumstances and the nature, scale and complexity of the firm's activities.

1. (1)

   A CRR firm that is significant must ensure that the members of the management body of the firm do not hold more than one of the following combinations of directorship in any organisation at the same time:

   1. (a)

      one executive directorship with two non-executive directorships; and

   2. (b)

      four non-executive directorships.

2. (2)

   Paragraph (1) does not apply to members of the management body that represent the United Kingdom.

[Note: article 91(3) of

CRD]

For the purposes of SYSC 4.3A.5 R and SYSC 4.3A.6 R:

1. (1)

   directorships in organisations which do not pursue predominantly commercial objectives shall not count; and

2. (2)

   the following shall count as a single directorship:

   1. (a)

      executive or non-executive directorships held within the same group; or

   2. (b)

      executive or non-executive directorships held within:

      1. (i)

         firms that are members of the same institutional protection scheme provided that the conditions set out in article 113(7) of the CRR are fulfilled; or

      2. (ii)

         undertakings (including non-financial entities) in which the firm holds a qualifying holding.

[Note:

article 91(3) of CRD]

A CRR firm that is significant must:

1. (1)

   establish a nomination committee composed of members of the management body who do not perform any executive function in the firm;

2. (2)

   ensure that the nomination committee is able to use any forms of resources the nomination committee deems appropriate, including external advice; and

3. (3)

   ensure that the nomination committee receives appropriate funding.

[Note: article 88(2) of

CRD]

A CRR firm that has a nomination committee must ensure that the nomination committee:

1. (1)

   engage a broad set of qualities and competences when recruiting members to the management body and for that purpose puts in place a policy promoting diversity on the management body;

2. (2)

   identifies and recommends for approval, by the management body or by general meeting, candidates to fill management body vacancies, having evaluated the balance of knowledge, skills, diversity and experience of the management body;

3. (3)

   prepares a description of the roles and capabilities for a particular appointment, and assesses the time commitment required;

4. (4)

   decides on a target for the representation of the underrepresented gender in the management body and prepares a policy on how to increase the number of the underrepresented gender in the management body in order to meet that target;

5. (5)

   periodically, and at least annually, assesses the structure, size, composition and performance of the management body and makes recommendations to the management body with regard to any changes;

6. (6)

   periodically, and at least annually, assesses the knowledge, skills and experience of individual members of the management body and of the management body collectively, and reports this to the management body;

7. (7)

   periodically reviews the policy of the management body for selection and appointment of senior management and makes recommendations to the management body; and

8. (8)

   in performing its duties, and to the extent possible, on an ongoing basis, takes account of the need to ensure that the management body's decision making is not dominated by any one individual or small group of individuals in a manner that is detrimental to the interest of the firm as a whole;

[Note: article 88(2) and article 91(10) of

CRD]

A CRR firm that does not have a nomination committee must engage a broad set of qualities and competences when recruiting members to the management body. For that purpose a CRR firm that does not have a nomination committee must put in place a policy promoting diversity on the management body.

[Note: article 91(10) of

CRD]

A CRR firm that maintains a website must explain on the website how it complies with the requirements of SYSC 4.3A.1 R to SYSC 4.3A.3 R and SYSC 4.3A.4 R to SYSC 4.3A.11 R.

[Note: article 96 of CRD]

7This section applies to:

1. (1)

   an authorised professional firm in respect of its non-mainstream regulated activities unless the firm is also conducting other regulated activities and has appointed approved persons to perform the governing functions with equivalent responsibilities for the firm'snon-mainstream regulated activities and other regulated activities;

2. (2)

   activities carried on by a firm whose principal purpose is to carry on activities other than regulated activities and which is:

   1. (a)

      an oil market participant; or

   2. (b)

      a service company; or

   3. (c)

      an energy market participant; or

   4. (d)

      a wholly-owned subsidiary of:

      1. (i)

         a local authority; or

      2. (ii)

         a registered social landlord; or

   5. (e)

      a firm with permission to carry on insurance mediation activity in relation to non-investment insurance contracts but no other regulated activity;

3. (3)

   a credit firm which holds only a limited permission (other than a not-for-profit debt advice body) with respect to the relevant credit activity (as defined in paragraph 2G of Schedule 6 to the Act) for which it has limited permission;

4. (4)

   an incoming Treaty firm, an incoming EEA firm or a UCITS qualifier (but only SYSC 4.4.5R (2) applies for these firms); and

5. (5)

   a sole trader, but only if he employs any person who is required to be approved under section 59 of the Act (Approval for particular arrangements).

A firm must take reasonable care to maintain a clear and appropriate apportionment of significant responsibilities among its directors and senior managers in such a way that:

1. (1)

   it is clear who has which of those responsibilities; and

2. (2)

   the business and affairs of the firm can be adequately monitored and controlled by the directors, relevant senior managers and governing body of the firm.