Related provisions for BIPRU 3.4.103

81 - 100 of 240 items.

Search Term(s)

Filter by Topics

Filter by Modules

Filter by Documents

Filter by Keywords

Effective Period

Similar To

To access the FCA Handbook Archive choose a date between 1 January 2001 and 31 December 2004 (From field only).

APER 4.6.4GRP
1Behaviour of the type referred to in APER 4.6.3 G includes, but is not limited to:(1) permitting transactions without a sufficient understanding of the risks involved;(2) permitting expansion of the business without reasonably assessing the potential risks of that expansion;(3) inadequately monitoring highly profitable transactions or business practices or unusual transactions or business practices;(4) accepting implausible or unsatisfactory explanations from subordinates without
APER 4.6.12GRP
(1) It is important for the approved person performing an accountable higher management function1 to understand the business for which they are1 responsible (APER 4.6.4G1). An approved person performing an accountable higher management function1 is unlikely to be an expert in all aspects of a complex financial services business. However, they1 should understand and inform themselves1 about the business sufficiently to understand the risks of its trading, credit or other business
DTR 7.2.5RRP
The corporate governance statement must contain a description of the main features of the issuer's internal control and risk management systems in relation to the financial reporting process.[Note: article 20(1)(c) of the Accounting Directive4]
DTR 7.2.10RRP
Subject to DTR 7.2.11 R, an issuer which is required to prepare a group directors’ report within the meaning of section 415(2) of the Companies Act 2006 must include in that report a description of the main features of the group’s internal control and risk management systems in relation to the financial reporting process for the undertakings included in the consolidation, taken as a whole4. In the event that the issuer presents its own annual report and its consolidated annual
MIPRU 4.2F.8GRP
(1) For the purposes of MIPRU 4.2F.7R (2), a firm may use the FTSE UK gilt 10-year yield index which the Council of Mortgage Lenders makes available to its members. (2) If a firm offers a variable interest rate on a lifetime mortgage, it should calculate an average interest rate in a way which is consistent with the calculation of the discount rate.(3) To determine the projected number of years to maturity of the exposure, a firm may use the standard mortality tables published
MIPRU 4.2F.16GRP
For MIPRU 4.2F.14R (1)(a), the monitoring of property values should be an ongoing part of risk managing and tracking the portfolio. The requirement to monitor property values does not include the physical assessment of each property in the portfolio.
MIPRU 4.2F.49RRP
Exposures in the form of funds that are not past due items, that have been assigned a risk weight of 150% or greater, and for which value adjustments have been established, may be assigned a risk weight of: (1) 100% if value adjustments are no less than 20% of the exposure value gross of value adjustments; or(2) 50%, if value adjustments are no less than 50% of the exposure value gross of value adjustments
BIPRU 1.2.26RRP
A firm must have clearly defined policies and procedures for determining which positions to include in the trading book for the purposes of calculating its capital requirements, consistent with the criteria set out in BIPRU 1.2.3 R to BIPRU 1.2.4 R, BIPRU 1.2.10 R to BIPRU 1.2.11 R, BIPRU 1.1.13 R and BIPRU 1.2.22 R and taking into account the firm's risk management capabilities and practices. Compliance with these policies and procedures must be fully documented and subject to
BIPRU 1.2.27RRP
A firm must have clearly defined policies and procedures for overall management of the trading book. At a minimum these policies and procedures must address:(1) the activities the firm considers to be trading and as constituting part of the trading book for capital requirement purposes;(2) the extent to which a position can be marked-to-market daily by reference to an active, liquid two-way market;(3) for positions that are marked-to-model, the extent to which the firm can:(a)
BIPRU 1.2.33GRP
The trading book policy statement may be prepared on either a consolidated or a solo (or solo-consolidated) basis. It should be prepared on a consolidated basis when a group either manages its trading risk centrally or employs the same risk management techniques in each group member. A trading book policy statement prepared on a consolidated basis should set out how it applies to each firm in the group and should be approved by each such firm'sgoverning body.
SYSC 19D.2.1RRP
A firm must establish, implement and maintain remuneration policies, procedures and practices that are consistent with, and promote, sound and effective risk management.[Note: article 74(1) of CRD]
SYSC 19D.2.2GRP
(1) The dual-regulated firms Remuneration Code covers all aspects of remuneration that could have a bearing on effective risk management, including salaries, bonuses, long-term incentive plans, options, hiring bonuses, severance packages and pension arrangements.(2) As with other aspects of a firm's systems and controls, in accordance with SYSC 4.1.2R (general organisational requirements) remuneration policies, procedures and practices must be comprehensive and proportionate to
MAR 5.3.1RRP
1A firm4 must have:(1) transparent4 rules and procedures for fair and orderly trading;[Note: articles 18(1) and 19(1)4of MiFID](2) objective criteria for the efficient execution of orders which are established and implemented in non-discretionary rules4; [Note: articles 18(1) and 19(1)4 of MiFID](2A) arrangements for the sound management of the technical operations of the facility, including the establishment of effective contingency arrangements to cope with the risks of systems
MAR 5.3.1ARRP
4A firm must:(1) ensure the MTF has at least three materially active members or users who each have the opportunity to interact with all the others in respect of price formation;[Note: article 18(7) of MiFID](2) have arrangements to ensure it is adequately equipped to manage the risks to which it is exposed, to implement appropriate arrangements and systems to identify all significant risks to its operation and put in place effective measures to mitigate those risks;[Note: article
SUP 5.3.1GRP
The appointment of a skilled person to produce a report under section 166 of the Act (Reports by skilled persons) is one of the FCA's5 regulatory tools. The tool may be used:66(1) for diagnostic purposes, to identify, assess and measure risks; (2) for monitoring purposes, to track the development of identified risks, wherever these arise;(3) in the context of preventative action, to limit or reduce identified risks and so prevent them from crystallising or increasing; and (4)
SUP 5.3.2GRP
The decision by the FCA5 to require a report by a skilled person under section 166 of the Act5 (Reports by skilled persons) 6will normally be prompted by a specific requirement for information, analysis of information, assessment of a situation,4 expert advice or recommendations or by a decision to seek assurance in relation to a regulatory return4. It may4 be part of the risk mitigation programme applicable to a firm, or the result of an event or development relating or relevant
COLL 5.3.9RRP
2Where an authorised fund manager of a UCITS scheme uses the commitment approach for the calculation of global exposure, it must:(1) ensure that it applies this approach to all derivative and forward transactions (including embedded derivatives as referred to in COLL 5.2.19R (3A) (Derivatives: general)), whether used as part of the scheme's general investment policy, for the purposes of risk reduction or for the purposes of efficient portfolio management in accordance with the
COLL 5.3.11GRP
2Authorised fund managers of UCITS schemes6 are advised that ESMA has76 issued guidelines which, in accordance with the UCITS implementing Directive, authorised fund managers should comply with in applying the rules in this section in relation to UCITS schemes:6Guidelines: Risk Measurement and the Calculation of Global Exposure and Counterparty Risk for UCITS (CESR/10-788)https://www.esma.europa.eu/sites/default/files/library/2015/11/10_788.pdf7Guidelines to competent authorities
BIPRU 13.7.6RRP
A firm may treat contractual netting as risk-reducing only under the following conditions:(1) the firm must have a contractual netting agreement with its counterparty which creates a single legal obligation, covering all included transactions, such that, in the event of a counterparty's failure to perform owing to default, bankruptcy, liquidation or any other similar circumstance, the firm would have a claim to receive or an obligation to pay only the net sum of the positive and
BIPRU 13.7.7RRP
If any of the competent authorities concerned is not satisfied that the contractual netting is legally valid under the law of each of the relevant jurisdictions2, the firm must not treat the contractual netting agreement as risk-reducing.[Note: BCD Annex III Part 7 point (b) (part)]
CONC 10.1.4GRP
Prudential standards have an important role in minimising the risk of harm to customers by ensuring that a firm behaves prudently in monitoring and managing business and financial risks.
CONC 10.1.5GRP
More generally, having adequate prudential resources gives the firm a degree of resilience and some indication to customers of creditworthiness, substance and the commitment of its owners. Prudential standards aim to ensure that a firm has prudential resources which can provide cover for operational and compliance failures and pay redress, as well as reducing the possibility of a shortfall in funds and providing a cushion against disruption if the firm ceases to trade.
INSPRU 3.1.61GRP
In selecting the appropriate cover, the firm should ensure that both credit risk, and the risk that the value or yield in the assets will not, in all circumstances, match fluctuations in the relevant index, are within acceptable limits.8
INSPRU 3.1.61ARRP
A pure reinsurer must invest its assets in accordance with the following requirements:(1) the assets must take account of the type of business carried out by the firm, in particular the nature, amount and duration of expected claims payments, in such a way as to secure the sufficiency, liquidity, security, quality, profitability and matching of its investments;(2) the firm must ensure that the assets are diversified and adequately spread and allow the firm to respond adequately
MIPRU 4.2A.9RRP
For the purposes of applying a risk weight, the exposure value must be multiplied by the risk weight determined in accordance with MIPRU 4.2A.10 R, MIPRU 4.2A.10A R, MIPRU 4.2A.10B R, 3MIPRU 4.2A.11 R, MIPRU 4.2A.12 R or 3MIPRU 4.2A.17 R, unless it is deducted from capital resources under MIPRU 4.4.4 R or MIPRU 4.2BA3.
MIPRU 4.2A.17ARRP
(1) 3The application of risk weights must be based on the exposureclass to which the exposure is assigned and, to the extent specified in MIPRU 4.2BA and MIPRU 4.2F (Exposures and risk weights), its credit quality.(2) Credit quality must be determined by reference to solicited credit assessments of eligible ECAIs where these are available, in accordance with MIPRU 4.2E (Use of external credit assessments).
MCOB 5.6.65RRP
The following text must be included at the end of Section 7 'Are you comfortable with the risks?': ‘The MoneyHelper13 information sheet "You can afford your mortgage now, but what if...?" will help you consider the risks. You can get a free copy from https://www.moneyhelper.org.uk13,8612or by calling 0800 138 7777.’78866
MCOB 5.6.139RRP
MCOB 5.6.140 R to MCOB 5.6.145 R apply only to loans without a term or regular payment plan where some or all of the interest rolls up, for example bridging loans9, secured overdrafts or mortgage credit cards.9
MCOB 5.6.145RRP
The following text must be included at the end of Section 7 'Are you comfortable with the risks?': ‘The MoneyHelper13 information sheet "You can afford your mortgage now, but what if...?" will help you consider the risks. You can get a free copy from https://www.moneyhelper.org.uk8 or by calling 0800 138 7777.'761288686
REC 2.5.1UKRP

Schedule to the Recognition Requirements Regulations, paragraphs 3 – 3H4

Paragraph 3 – Systems and controls4

(1)

The [UK RIE] must ensure that the systems and controls, including procedures and arrangements,4 used in the performance of its functions and the functions of the trading venues it operates are adequate, effective4 and appropriate for the scale and nature of its business.

7[Note: SYSC 15A contains requirements relating to the operational resilience of UK RIEs]

(2)

Sub-paragraph (1) applies in particular to systems and controls concerning -

(a)

the transmission of information;

(b)

the assessment, mitigation and management of risks to the performance of the [UK RIE'srelevant functions];

(c)

the effecting and monitoring of transactions on the [UK RIE];

(ca)

the technical operation of the [UK RIE], including contingency arrangements for disruption to its facilities;

(d)

the operation of the arrangements mentioned in paragraph 4(2)(d); and

(e)

(where relevant) the safeguarding and administration of assets belonging to users of the [UK RIE's] facilities.

4(f)

the resilience of its trading systems;

4[Note:MiFID RTS 7 contains requirements on the resilience of trading systems operated by trading venues that enable algorithmic trading]

4(g)

the ability to have sufficient capacity to deal with peak order and message volumes;

4[Note:MiFID RTS 7 contains requirements on the adequacy of capacity of trading systems operated by trading venues that enable algorithmic trading]

4(h)

the ability to ensure orderly trading under conditions of severe market stress;

4(i)

the effectiveness of business continuity arrangements to ensure the continuity of the [UK RIE’s] services if there is any failure of its trading systems including the testing of the [UK RIE’s] systems and controls;

4(j)

the ability to reject orders that exceed predetermined volume or price thresholds or which are clearly erroneous;

4(k)

the ability to ensure algorithmic trading systems cannot create or contribute to disorderly trading conditions on trading venues operated by the [UK RIE];

4(l)

the ability to ensure disorderly trading conditions which arise from the use of algorithmic trading systems, including systems to limit the ratio of unexecuted orders to transactions that may be entered into the [UK RIE’s] trading system by a member or participant are capable of being managed;

[Note:MiFID RTS 9 contains requirements on the ratio of unexecuted orders to transactions to be taken into account by a trading venue that operates electronic continuous auction order book, quote-driven or hybrid trading systems]

4(m)

the ability to ensure the flow of orders is able to be slowed down if there is a risk of system capacity being reached;

4(n)

the ability to limit and enforce the minimum tick size which may be executed on its trading venues; and

4(o)

the requirement for members and participants to carry out appropriate testing of algorithms.

4[Note:MiFID RTS 7 contains requirements on the appropriate testing of algorithms to ensure that trading systems, when they enable algorithmic trading, cannot create or contribute to disorderly trading conditions]

4(3)

For the purposes of sub-paragraph 2(c), the [UK RIE] must -

4(a)

establish and maintain effective arrangements and procedures including the necessary resource for the regular monitoring of the compliance by members or participants with its rules; and

4(b)

monitor orders sent including cancellations and the transactions undertaken by its members or participants under its systems in order to identify infringements of those rules, disorderly trading conditions or conduct that may indicate behavior that is prohibited under the market abuse regulation or system disruptions in relation to a financial instrument.

4(4)

For the purpose of sub-paragraph (2)(o) the [UK RIE] must provide environments to facilitate such testing.

4(5)

The [UK RIE] must be adequately equipped to manage the risks to which it is exposed, to implement appropriate arrangements and systems to identify all significant risks to its operation, and to put in place effective measures to mitigate those risks.

4Paragraph 3A – Market making arrangements

4(1)

The [UK RIE] must -

4(a)

have written agreements with all investment firms pursuing a market making strategy on trading venues operated by it (“market making agreements”);

4(b)

have schemes, appropriate to the nature and scale of a trading venue, to ensure that a sufficient number of investment firms enter into such agreements which require them to post firm quotes at competitive prices with the result of providing liquidity to the market on a regular and predictable basis;

4(c)

monitor and enforce compliance with the market making agreements;

4(d)

inform the FCA of the content of its market making agreements; and

4(e)

provide the FCA with any information it requests which is necessary for the FCA to satisfy itself that the market making agreements comply with paragraphs (c) and (d) of this sub-paragraph and sub-paragraph 2.

4(2)

A market making agreement must specify-

4(a)

the obligations of the investment firm in relation to the provision of liquidity;

4(b)

where applicable, any obligations arising from the participation in a scheme mentioned in sub-paragraph (1)(b);

4(c)

any incentives in terms of rebates or otherwise offered by the [UK RIE] to the investment firm in order for it to provide liquidity to the market on a regular and predictable basis; and

4(d)

where applicable, any other rights accruing to the investment firm as a result of participation in the scheme referred to in sub-paragraph (1)(b).

4(3)

For the purposes of this paragraph, an investment firm pursues a market making strategy if -

4(a)

the firm is a member or participant of one or more trading venues;

4(b)

the firm’s strategy, when dealing on own account, involves posting firm, simultaneous two-way quotes of comparable size at competitive prices relating to one or more financial instruments on a single trading venue, across different trading venues; and

4(c)

the result is providing liquidity on a regular and frequent basis to the overall market.

4Paragraph 3B – Halting trading

4(1)

The [UK RIE] must be able to -

4(a)

temporarily halt or constrain trading on any trading venue operated by it if there is a significant price movement in a financial instrument on such a trading venue or a related trading venue during a short period; and

4(b)

in exceptional cases be able to cancel, vary, or correct any transaction.

4(2)

For the purposes of sub-paragraph (1), the [UK RIE] must ensure that the parameters for halting trading are appropriately calibrated in a way which takes into account -

4(a)

the liquidity of different asset classes and subclasses;

4(b)

the nature of the trading venue market model; and

4(c)

the types of users,

4to ensure the parameters are sufficient to avoid significant disruptions to the orderliness of trading.

4(3)

The [UK RIE] must report the parameters mentioned in sub-paragraph (2) and any material changes to those parameters to the FCA in a format to be specified by the FCA.

4(4)

If a trading venue operated by the [UK RIE] is material in terms of liquidity of the trading of a financial instrument and it halts trading in the United Kingdom6 in that instrument it must have systems and procedures in place to ensure that it notifies the FCA.

4[Note:MiFID RTS 12 contains requirements for when a regulated market is material in terms of liquidity in a financial instrument for purposes of trading halt notifications]

4Paragraph 3C – Direct electronic access

4Where the [UK RIE] permits direct electronic access to a trading venue it operates, it must -

4(1)

(a)

ensure that a member of, or participant in that trading venue is only permitted to provide direct electronic access to the venue if the member or participant -

4(i)

an investment firm which has permission under Part 4A of the Act to carry on a regulated activity which is any of the investment services or activities;6

4(ii)

a qualifying credit institution that has Part 4A permission to carry on the regulated activity of accepting deposits;6

4(iii)

is a person who falls within regulation 30(1A) of the Financial Services and Markets Act 2000 (Markets in Financial Instruments) Regulations 2017 and has permission under Part 4A of the Act to carry on a regulated activity which is any of the investment services or activities;6

4(iv)

is a third country firm providing the direct electronic access in the course of exercising rights under Article 46.1 (general provisions) 6of the markets in financial instruments regulation;

4(v)

is a third country firm and the provision of the direct electronic access by that firm is subject to the exclusion in Article 72 of the Financial Services and Markets Act 2000 (Regulated Activities) Order 2001; or

4(vi)

is a third country firm which does not come within paragraph (iv) or (v) and is otherwise permitted to provide the direct electronic access under the Act;

4(b)

ensure that appropriate criteria are set and applied for the suitability of persons to whom direct electronic access services may be provided;

4(c)

ensure that a member of, or participant in, the trading venue retains responsibility for adherence to the requirements of any provisions of the law of the United Kingdom relied on by the United Kingdom before IP completion day to implement6 the markets in financial instruments directive in respect of orders and trades executed using the direct electronic access service, as those provisions have effect on IP completion day, in the case of rules made by the FCA under the Act, and as amended from time to time, in all other cases6;

4(d)

set appropriate standards regarding risk controls and thresholds on trading through direct electronic access;

4(e)

be able to distinguish and if necessary stop orders or trading on that trading venue by a person using direct electronic access separately from -

4(i)

other orders; or

4(ii)

trading by the member or participant providing the direct electronic access; and

4(f)

have arrangements in place to suspend or terminate the provision to a client of direct electronic access to that trading venue by a member of, or participant in, the trading venue in the case of non-compliance with this paragraph.

4[Note:MiFID RTS 7 contains requirements on direct electronic access permitted through a trading venue’s systems]

4Paragraph 3D – Co-location services

4(1)

The [UK RIE’s] rules on colocation services must be transparent, fair and nondiscriminatory.

4[Note:MiFID RTS 10 contains requirements to ensure co-location services are transparent, fair and non-discriminatory]

4Paragraph 3E – Fee structures

4(1)

The [UK RIE’s] fee structure, for all fees it charges including execution fees and ancillary fees and rebates it grants, must -

4(a)

be transparent, fair and non-discriminatory;

4[Note:MiFID RTS 10 contains requirements to ensure fee structures are transparent, fair and non-discriminatory]

4(b)

not create incentives to place, modify or cancel orders, or execute transactions, in a way which contributes to disorderly trading conditions or market abuse; and

4[Note:MiFID RTS 10 contains requirements concerning prohibited fee structures]

4(c)

impose market making obligations in individual shares or suitable baskets of shares for any rebates that are granted.

4(2)

Nothing in sub-paragraph (1) prevents the [UK RIE] from -

4(a)

adjusting its fees for cancelled orders according to the length of time for which the order was maintained;

4(b)

calibrating its fees to each financial instrument to which they apply;

4(c)

imposing a higher fee -

4(i)

for placing an order which is cancelled than an order which is executed;

4(ii)

on participants placing a high ratio of cancelled orders to executed orders; or

4(iii)

on a person operating a high-frequency algorithmic trading technique,

4in order to reflect the additional burden on system capacity.

4Paragraph 3F – Algorithmic trading

4(1)

The [UK RIE] must require members of and participants in trading venues operated by it to flag orders generated by algorithmic trading in order for it to be able to identify the -

4(a)

the different algorithms used for the creation of orders; and

4(b)

the persons initiating those orders.

4Paragraph 3G – Tick size regimes

4(1)

Subject to paragraph 1A, the8 [UK RIE] must adopt tick size regimes in respect of trading venues operated by it in -

4(a)

shares, depositary receipts, exchange-traded funds, certificates and other similar financial instruments traded on each trading venue; and

4[Note:MiFID RTS 11 contains requirements on the tick size regime for shares, depositary receipts, exchange traded funds and certificates5]

4(b)

any financial instrument for which technical standards are adopted by FCA under paragraphs 24 and 25 of Part 2 of Schedule 3 to6 the markets in financial instruments regulation8 which is traded on that trading venue.

[Note:MiFID RTS 11]

8(1A)

The application of tick sizes shall not prevent the [UK RIE] from matching orders that are large in scale (as determined in accordance with Article 4 of the markets in financial instruments regulation) at the mid-point within the current bid and offer prices.

[Note:MiFID RTS 11]

4 (2)

The tick size regime must -

4(a)

be calibrated to reflect the liquidity profile of the financial instrument in different markets and the average bid-ask spread taking into account desirability of enabling reasonably stable prices without unduly constraining further narrowing of spreads; and

4(b)

adapt the tick size for each financial instrument appropriately.

4(3)

The tick size regime must comply with Commission Delegated Regulation (EU) 2017/588 of 14 July 2016 supplementing Directive 2014/65/EU of the European Parliament and of the Council with regard to regulatory technical standards on the tick size regime for shares, depositary receipts and exchange-traded funds6.

4[Note:MiFID RTS 11]

4Paragraph 3H – Syncronisation of business clocks

4(1)

The [UK RIE] must synchronise the business clocks it uses to record the date and time of any reportable event in accordance with Commission Delegated Regulation (EU) 2017/574 of 7 June 2016 supplementing Directive 2014/65/EU of the European Parliament and of the Council with regard to regulatory technical standards for the level of accuracy of business clocks6.

4[Note:MiFID RTS 25]
REC 2.5.4GRP
REC 2.5.5G to REC 2.5.20G4 set out other matters to which the FCA3 may have regard in assessing the UK RIE’s4 systems and controls used for the transmission of information, risk management, 4the operation of settlement arrangements (the matters covered in paragraph 4(2)(d) of the Schedule to the Recognition Requirements Regulations),4 the safeguarding and administration of assets and certain other aspects of its operations4. 33
REC 2.5.6GRP
In assessing a UK recognised body's systems and controls for assessing and managing risk, the FCA3 may also have regard to the extent to which these systems and controls enable the UK recognised body to:3(1) identify all the general, operational, legal and market risks wherever they arise in its activities;(2) measure and control the different types of risk;(3) allocate responsibility for risk management to persons with appropriate knowledge and expertise; and(4) provide sufficient,
SUP 3.11.3GRP
1The FCA expects a firm to use the client assets report as a tool to evaluate the effectiveness of the systems that it has in place for the purpose of complying with requirements to which SUP 3.10.5 R refers. Accordingly, a firm should ensure that the report is integrated into its risk management framework and decision-making.
SYSC 13.2.1GRP
SYSC 13 provides guidance on how to interpret SYSC 3.1.1 R and SYSC 3.2.6 R, which deal with the establishment and maintenance of systems and controls, in relation to the management of operational risk. Operational risk has been described by the Basel Committee on Banking Supervision as "the risk of loss, resulting from inadequate or failed internal processes, people and systems, or from external events". This chapter covers systems and controls for managing risks concerning any
EG 2.11.1RP
2The FCA is committed to ensuring that senior managers of firms fulfil their responsibilities. The FCA expects senior management to take responsibility for ensuring firms identify risks, develop appropriate systems and controls to manage those risks, and ensure that the systems and controls are effective in practice.1 Where senior managers have failed to meet our standards1, the FCA will, where appropriate, bring cases against individuals as well as, or instead of,1firms. The
PERG 9.5.5GRP
In the FCA's view, the question of whether funds are invested by BC with the aim of spreading investment risk is not affected by the levels of risk involved in particular investments. What matters for these purposes is that the aim is to spread the risk, whatever it may be. For example, the value of each of BC's investments, if taken separately, might be subject to a high level of risk. However, this would not itself result in BC failing to satisfy the property condition as long
SYSC 13.5.1GRP
In this chapter, the following interpretations of risk management terms apply:(1) a firm's risk culture encompasses the general awareness, attitude and behaviour of its employees and appointed representatives or, where applicable, its tied agents,1to risk and the management of risk within the organisation;(2) operational exposure means the degree of operational risk faced by a firm and is usually expressed in terms of the likelihood and impact of a particular type of operational
CASS 1.5.2GRP
For any electronic communication with a customer, a firm should:(1) have in place appropriate arrangements, including contingency plans, to ensure the secure transmission and receipt of the communication; it should also be able to verify the authenticity and integrity of the communication; the arrangements should be proportionate and take into account the different levels of risk in a firm's business;(2) be able to demonstrate that the customer wishes to communicate using this