Home   Browse contents   View updates   Search  
     Quick search
Go
   

Dubai Financial Services Authority (DFSA): Contents

Dubai Financial Services Authority (DFSA)
Laws
Rulebook Modules
Authorised Market Institutions (AMI) [VER18/02-17]
Part 3 Licensing Requirements
Sourcebook Modules
Consultation Papers
Policy Statements
DFSA Codes of Practice
Amendments to Legislation
Media Releases
Notices
Financial Markets Tribunal
Archive

Whole SectionText only Print Print Manager Link


  Versions
(1 version)
 
Jul 14 2013 onwards

AMI 5.5.5

View whole sectionWhole Section PDF

The definitive version of DFSA handbook text is the PDF version as that is the text of the instrument as made and published by the DFSA.

To view past versions of this module in PDF format, please visit the Archive.

(1) An Authorised Market InstitutionG must have sufficient technology resources to operate, maintain and supervise its facilities.
(2) The Authorised Market InstitutionG must be able to satisfy the DFSAG that its technology resources are established and maintained in such a way as to ensure that they are secure and maintain the confidentiality of the data they contain.
(3) An Authorised Market InstitutionG must ensure that its MembersG and other participants on its facilities have sufficient technology resources which are compatible with its own.
(4) For the purposes of meeting the requirement in (1), an Authorised Market InstitutionG must have adequate procedures and arrangements for the evaluation, selection and on-going monitoring of information technology systems. Such procedures and arrangements must, at a minimum, provide for:
(a) problem management and system change;
(b) testing information technology systems before live operations in accordance with the requirements in Rule 5.5.6;
(c) monitoring and reporting on system performance, availability and integrity; and
(d) adequate measures to ensure:
(i) the information technology systems are resilient and not prone to failure;
(ii). business continuity in the event that an information technology system fails;
(iii) protection of the information technology systems from damage, tampering, misuse or unauthorised access; and
(iv) the integrity of data forming part of, or being processed through, information technology systems.
(5) An Authorised Market InstitutionG must meet the applicable requirements in App 1 for the purposes of:
(a) testing the adequacy and effectiveness of its own information technology systems; and
(b) assessing the adequacy and effectiveness of information technology systems of its MembersG .
Derived from RM118/2013 [VER15/07-13]