Related provisions for SYSC 4.4.2
1 - 17 of 17 items.
1A common
platform firm must:(1) when relying on a third party for
the performance of operational functions which are critical for the performance
of regulated activities, listed activities or ancillary
services (in this chapter "relevant services and activities")
on a continuous and satisfactory basis, ensure that it takes reasonable steps
to avoid undue additional operational risk; (2) not undertake the outsourcing of important operational functions
in such a way as to impair
SYSC 4.1.1 R requires
a firm to have effective processes to
identify, manage, monitor and report risks and internal control mechanisms.
Except in relation to those functions described in SYSC 8.1.5 R, where a firm relies on a third party for the performance
of operational functions which are not critical or important for the performance
of relevant services and activities (see SYSC 8.1.1 R (1)) on a continuous
and satisfactory basis, it should take into account, in a manner that
For the
purposes of this chapter an operational function is regarded as critical or
important if a defect or failure in its performance would materially impair
the continuing compliance of a common platform
firm with the conditions and obligations of its authorisation or its other obligations under
the regulatory system, or its
financial performance, or the soundness or the continuity of its relevant
services and activities.[Note: article 13(1) of the MiFID
implementing Direc
If a firm outsources critical
or important operational functions or any relevant services and activities,
it remains fully responsible for discharging all of its obligations under
the regulatory system and must
comply, in particular, with the following conditions:2(1) the outsourcing must
not result in the delegation by senior personnel of
their responsibility;(2) the relationship and obligations
of the firm towards its clients under the regulatory
system must not be altered;(3)
A common platform firm must make available
on request to the FSA and
any other relevant competent authority all
information necessary to enable the FSA and
any other relevant competent authority to
supervise the compliance of the performance of the outsourced activities
with the requirements of the regulatory system.[Note: article
14(5) of the MiFID implementing Directive]
3(1) A firm must have robust governance arrangements, which include a clear organisational structure with well defined, transparent and consistent lines of responsibility, effective processes to identify, manage, monitor and report the risks it is or might be exposed to, and internal control mechanisms, including sound administrative and accounting procedures and effective control and safeguard arrangements for information processing systems.8(2) 8A BIPRU firm and a third country
For a common platform firm, the 3 arrangements, processes and mechanisms referred to in SYSC 4.1.1 R must be comprehensive and proportionate to the nature, scale and complexity ofSYSC 4.1.7 R, SYSC 5.1.7 R ,8SYSC 7 and (for a BIPRU firm and a third country BIPRU firm)SYSC 19A.83[Note: article 22(2) of the Banking Consolidation Directive]
A firm (with the exception of a sole trader who does not employ any person who is required to be approved under section 59 of the Act (Approval for particular arrangements))3 must, taking into account the nature, scale and complexity of the business of the firm, and the nature and range of the financial services and activities 3undertaken in the course of that business:310(1) (if it is a common platform firm or a management company)10 establish, implement and maintain decision-making
3A firm that is not a common platform firm or a management company10 should take into account the decision-making procedures and effective internal reporting rules (SYSC 4.1.4R (1),10(3) and (4))10 as if they were guidance (and as if "should" appeared in those rules instead of "must") as explained in SYSC 1 Annex 1.3.3 G5.
The matters dealt with in a business continuity policy should include:(1) resource requirements such as people, systems and other assets, and arrangements for obtaining these resources;(2) the recovery priorities for the firm's operations; (3) communication arrangements for internal and external concerned parties (including the FSA, clients and the press);(4) escalation and invocation plans that outline the processes for implementing the business continuity plans, together with
1A firm must employ personnel with the skills, knowledge and expertise necessary for the discharge of the responsibilities allocated to them.[Note:article 5(1)(d) of the MiFID implementing Directive, articles 12(1)(a) and 14(1)(c) of the UCITS Directive and article 5(1) of the UCITS implementing Directive]63
The systems, internal control mechanisms and arrangements established by a firm in accordance with this chapter must take into account the nature, scale and complexity of its business and the nature and range of financial services and activities 3undertaken in the course of that business.[Note:article 5(1) final paragraph of the MiFID implementing Directiveand articles 4(1) final paragraph and 5(4) of the UCITS implementing Directive]66
The senior personnel of a common platform firm, a management company3, or of the UK branch of a non-EEA bank1must be of sufficiently good repute and sufficiently experienced as to ensure the sound and prudent management of the firm.[Note: article 9(1) of MiFID, article 7(1)(b) of the UCITS Directive3 and article 11(1) second paragraph of the Banking Consolidation Directive ]
A common platform firm, a management company3 and the UK branch of a non-EEA bank1must ensure that its management is undertaken by at least two persons meeting the requirements laid down in SYSC 4.2.1 R.[Note: article 9(4) first paragraph of MiFID, article 7(1)(b) of the UCITS Directive3and article 11(1) first paragraph of the Banking Consolidation Directive]
At least two independent minds should be applied to both the formulation and implementation of the policies of a common platform firm, a management company3 and the UK branch of a non-EEA bank1. Where such1 a firm1 nominates just two individuals to direct its business, the FSA will not regard them as both effectively directing the business where one of them makes some, albeit significant, decisions relating to only a few aspects of the business. Each should play a part in the
Where there are more than two individuals directing the business of a common platform firm, a management company3 or the UK branch of a non-EEA bank,1 the FSA does not regard it as necessary for all of these individuals to be involved in all decisions relating to the determination of strategy and general direction. However, at least two individuals should be involved in all such decisions. Both individuals' judgement should be engaged so that major errors leading to difficulties
If a common platform firm, (other than a credit institution) or the UK branch of a non-EEA bank1, is:1(1) a natural person; or(2) a legal person managed by a single natural person; it must have alternative arrangements in place which ensure sound and prudent management of the firm.[Note: article 9(4) second paragraph of MiFID]
A firm must arrange for orderly records to
be kept of its business and internal organisation, including all services
and transactions undertaken by it, which must be sufficient to enable the FSA or any other
relevant competent authority under MiFID or the UCITS Directive4 to monitor the firm's compliance
with the requirements under the regulatory
system, and in particular to ascertain that the firm has complied with all obligations with
respect to clients.[Note:
article 13(6)
3Other firms should take account of the rule on the types of conflicts (see SYSC 10.1.4 R) as if it were guidance (and as if "should" appeared in that rule instead of "must") as explained in SYSC 1 Annex 1.3.3 G4, except when they produce or arrange the production of investment research in accordance with COBS 12.2, or produce or disseminate non-independent research in accordance with COBS 12.3 (see SYSC 10.1.16 R).
3Other firms should take account of the rule on records of conflicts (see SYSC 10.1.6 R) as if it were guidance (and as if "should" appeared in that rule instead of "must", as explained in SYSC 1 Annex 1.3.3 G4), except when they produce or arrange the production of investment research in accordance with COBS 12.2, or produce or disseminate non-independent research in accordance with COBS 12.3 (see SYSC 10.1.16 R).
3Other firms should take account of the rules relating to conflicts of interest policies (see SYSC 10.1.10 R and SYSC 10.1.11 R) as if they were guidance (and as if "should" appeared in those rules instead of "must", as explained in SYSC 1 Annex 1.3.3 G4), except when they produce or arrange the production of investment research in accordance with COBS 12.2, or produce or disseminate non-independent research in accordance with COBS 12.3 (see SYSC 10.1.16 R).
3The rules relating to:(1) types of conflict (see SYSC 10.1.4 R);(2) records of conflicts (see SYSC 10.1.6 R); and(3) conflicts of interest policies (see SYSC 10.1.10 R and SYSC 10.1.11 R);also apply to a firm which is not a common platform firm when it produces, or arranges for the production of, investment research that is intended or likely to be subsequently disseminated to clients of the firm or to the public in accordance with COBS 12.2, and when it produces or disseminates
The senior personnel of a common platform firm must approve and periodically review the strategies and policies for taking up, managing, monitoring and mitigating the risks the firm is or might be exposed to, including those posed by the macroeconomic environment in which it operates in relation to the status of the business cycle.[Note: annex V paragraph 2 of the Banking Consolidation Directive]
For a common platform firm included within the scope of SYSC 20 (Reverse stress testing), the strategies, policies and procedures for identifying, taking up, managing, monitoring and mitigating the risks to which the firm is or might be exposed include conducting reverse stress testing in accordance with SYSC 20. A common platform firm which falls outside the scope of SYSC 20 should consider conducting reverse stress tests on its business plan as well. This would further senior
2(1) SYSC 4.1.3 R requires a BIPRU firm to ensure that its internal control mechanisms and administrative and accounting procedures permit the verification of its compliance with rules adopted in accordance with the Capital Adequacy Directive at all times. In complying with this obligation, a BIPRU firm should document the organisation and responsibilities of its risk management function and it should document its risk management framework setting out how the risks in the business
(1) 4A firm which is not a common platform firm or management company8 and which carries on designated investment business with or for retail clients or professional clients must allocate to a director or senior manager the function of:(a) having responsibility for oversight of the firm's compliance; and(b) reporting to the governing body in respect of that responsibility.(2) In SYSC 6.1.4A R (1) compliance means compliance with the rules in:(a) COBS (Conduct of Business sourcebook);(b)
(1) 9This rule applies to a common platform firm conducting investment services and activities from a branch in another EEA State.(2) References to the regulatory system in SYSC 6.1.1R, SYSC 6.1.2 R and SYSC 6.1.3 R apply in respect of a firm'sbranch as if regulatory system includes a Host State's requirements under MiFID and the MiFID implementing Directive which are applicable to the investment services and activities conducted from the firm'sbranch.[Note: article 13(2) of
(1) If a firm'sremuneration policy is not aligned with effective risk management it is likely that employees will have incentives to act in ways that might undermine effective risk management.(2) The Remuneration Code covers all aspects of remuneration that could have a bearing on effective risk management including salaries, bonuses, long-term incentive plans, options, hiring bonuses, severance packages and pension arrangements. In applying the Remuneration Code, a firm should
Afirm (with the exception of a sole trader who does not employ any person who is required to be approved under section 59 of the Act (Approval for particular arrangements)),2 when allocating functions internally, must ensure that senior personnel and, where appropriate, the supervisory function, are responsible for ensuring that the firm complies with its obligations under the regulatory system1. In particular, senior personnel and, where appropriate, the supervisory function
(1) The purpose of the precautionary measure rule is to ensure that an incoming EEA firm is subject to the standards of MiFID and the MiFID implementing Directive to the extent that the Home State has not transposed MiFID or the MiFID implementing Directive by 1 November 2007. It is to 'fill a gap'.(2) The rule is made in the light of the duty of the United Kingdom under Article 62 of MiFID to adopt precautionary measures to protect investors. (3) The rule will be effective for
1The term 'internal audit function' in SYSC 6.2.1 R (and SYSC 4.1.11 G) refers to the generally understood concept of internal audit within a firm, that is, the function of assessing adherence to and the effectiveness of internal systems and controls, procedures and policies.The internal audit function is not a controlled function itself, but is part of the systems and controls function (CF28).42
A firm must provide a retail client with the following general information, if relevant:(1) the name and address of the firm, and the contact details necessary to enable a client to communicate effectively with the firm;(2) in the case of MiFID or equivalent third country business, the languages in which the client may communicate with the firm, and receive documents and other information from the firm;(3) the methods of communication to be used between the firm and the client