MIR 2.5.1

The Recognised Body must ensure that the systems and controls used in the performance of its Regulatory Functions are adequate, and appropriate for the scale and nature of its business. This applies in particular to systems and controls concerning:

(a) the transmission of information;
(b) the assessment, mitigation and management of risks to the performance of the Recognised Body's Regulatory Functions, including conflicts of interest;
(c) the effecting and monitoring of transactions on the Recognised Body;
(d) the technical operation of the Recognised Body, including contingency arrangements for disruption to its facilities;
(e) the operation of its functions relating to the safeguards and protections to investors;
(f) (where relevant) the safeguarding and administration of assets belonging to users of the Recognised Body's facilities; and
(g) outsourcing.