On December 22, 2015, IOSCO published a report on market intermediary business continuity and recovery planning. The report sets two standards for regulators of market intermediaries and recommends sound practices for regulators to consider in their supervision of market intermediaries. The IOSCO standards state that regulators should require market intermediaries to create and maintain written business continuity plans and to update the plans in the event of any material change to the intermediaries’ operations, structure, business or location and to conduct an annual review of the plan. The IOSCO recommendations on sound practices for regulators of intermediaries cover setting the components of a market intermediary’s business continuity plan and addressing the need for data protection and client privacy, in particular, against cyber-attacks. IOSCO recognizes that the sound practices are flexible and may be tailored to the size and needs of a market intermediary.
The report is available at: http://www.iosco.org/library/pubdocs/pdf/IOSCOPD523.pdf.