the type of scenario testing undertaken. For example, whether it is paper based, simulations or through the use of live-systems;
the frequency of the testing;
the number of important business services tested;
the availability and integrity of supporting assets;
how the firm would communicate with internal and external stakeholders effectively to reduce the harm caused by operational disruptions.
1Where a firm relies on a third party for the delivery of its important business services, we would expect the firm to work with the third party to ensure the validity of the firm’s scenario testing under SYSC 15A.5.3R. To the extent that the firm relies on the third party to carry out testing of the services provided by the third party to or on behalf of the firm, the firm should ensure the suitability of the methodologies, scenarios and considerations adopted by the third party in carrying out testing. The firm is ultimately responsible for the quality and accuracy of any testing carried out, whether by the firm or by a third party.
corruption, deletion or manipulation of data critical to the delivery of its important business services;
unavailability of facilities or key people;
unavailability of third party services, which are critical to the delivery of its important business services;
disruption to other market participants, where applicable; and
loss or reduced provision of technology underpinning the delivery of important business services.
following improvements made by the firm in response to a previous test; and
in any event, on a regular basis.