eBook OR

[OR] [LSEG] [E3] [CBS] [1] [ITo] Establish Impact Tolerances

Written by Moh Heng Goh | May 26, 2026 2:55:06 AM

CBS-1 Exchange Trading Services

For a market infrastructure organisation such as London Stock Exchange Group (LSEG), defining impact tolerances for critical business services is a central requirement of operational resilience. are among the most time-sensitive and systemically important services in the financial ecosystem, as

Exchange Trading Services are among the most time-sensitive and systemically important services in the financial ecosystem, as disruptions can rapidly affect market integrity, investor confidence, liquidity, price discovery, and regulatory obligations.

Regulatory authorities increasingly expect financial market infrastructures to identify the maximum level of disruption they can tolerate before causing intolerable harm to customers, counterparties, or the broader financial system.

Consistent with operational resilience guidance and the principle outlined in "[OR] [P2-S3] What is Impact Tolerance in Operational Resilience?", impact tolerance should focus on outcomes experienced by customers and markets rather than solely on internal recovery objectives.

For LSEG’s CBS-1 Exchange Trading Services, impact tolerances are established by considering maximum tolerable downtime (MTD), maximum tolerable data loss (MTDL), customer and regulatory consequences, systemic market impact, and current resilience capabilities.

The objective is to ensure that critical trading activities remain within acceptable disruption thresholds under severe but plausible scenarios.

Table P4: Establish Impact Tolerance for CBS-1

Sub-CBS Code

Sub-CBS

Maximum Tolerable Downtime (MTD)

Maximum Tolerable Data Loss (MTDL)

Customer Impact

Regulatory Impact

Impact Type

Current Resilience Status

Action Required

1.1

Market Participant Onboarding and Membership Management

24 hours

15 minutes

Delayed onboarding and market access

Moderate compliance exposure

Operational / Regulatory

Resilient

Increase automation and workflow redundancy

1.2

Customer Identification and Regulatory Validation

8 hours

Near-zero (<5 min)

Regulatory approval delays

High KYC/AML compliance exposure

Regulatory

Partially resilient

Enhance regulatory data validation and backup processes

1.3

Trading Account Setup and Access Provisioning

4 hours

Near-zero (<5 min)

Participants unable to trade

Significant market access impact

Customer / Operational

Resilient

Strengthen identity provisioning recovery capability

1.4

Trading Platform Connectivity and Session Establishment

15 minutes

Zero data loss

Trading access interruption

High market conduct implications

Systemic / Customer

Highly resilient

Maintain multi-site connectivity resilience

1.5

Instrument and Product Configuration Management

2 hours

15 minutes

Incorrect products available for trading

Compliance and market integrity risk

Operational / Regulatory

Resilient

Improve automated configuration controls

1.6

Market Data Feed Distribution and Synchronisation

5 minutes

Zero data loss

Market participants receive stale pricing

Severe transparency concerns

Systemic

Highly resilient

Enhance feed failover mechanisms

1.7

Order Entry and Capture Processing

5 minutes

Zero data loss

Inability to place orders

Immediate market disruption

Customer / Systemic

Highly resilient

Expand real-time transaction replication

1.8

Pre-Trade Risk and Control Validation

10 minutes

Zero data loss

Trades processed without controls

Breach of market risk obligations

Financial / Regulatory

Highly resilient

Strengthen control failover validation

1.9

Order Routing and Matching Engine Processing

Near real-time (<2 min)

Zero data loss

Trading ceases

Severe systemic market impact

Systemic

Highly resilient

Continue active-active architecture enhancement

1.10

Trade Execution Processing

Near real-time (<2 min)

Zero data loss

Execution failures and pricing uncertainty

Significant market integrity breach

Systemic

Highly resilient

Maintain ultra-low latency recovery mechanisms

1.11

Trading Session and Market State Management

10 minutes

Zero data loss

Market open/close disruptions

Exchange operational breach

Regulatory / Systemic

Highly resilient

Improve automated state synchronization

1.12

Market Surveillance and Trade Monitoring

30 minutes

5 minutes

Delayed fraud detection

Regulatory penalties likely

Regulatory

Resilient

Enhance AI-assisted monitoring resilience

1.13

Exception Handling and Trade Intervention Management

1 hour

15 minutes

Unresolved trade exceptions

Operational escalation risk

Operational

Resilient

Improve workflow orchestration and backup

1.14

Circuit Breaker and Volatility Control Administration

5 minutes

Zero data loss

Market instability during volatility events

Significant regulatory concern

Systemic

Highly resilient

Increase automated testing of volatility controls

1.15

Clearing and Settlement Integration Processing

30 minutes

Near-zero (<5 min)

Post-trade settlement delays

Financial market infrastructure impact

Financial / Third-party

Resilient

Strengthen integration recovery testing

1.16

Regulatory Reporting and Compliance Monitoring

4 hours

15 minutes

Delayed reporting obligations

Direct regulatory non-compliance

Regulatory

Resilient

Enhance reporting automation and contingency procedures

1.17

Reference Data and Master Data Administration

2 hours

15 minutes

Incorrect market reference information

Data governance concerns

Operational

Resilient

Increase integrity validation automation

1.18

Cybersecurity Monitoring and Trading Infrastructure Protection

15 minutes

Zero data loss

Increased cyber attack exposure

Severe supervisory concern

Cyber / Operational

Highly resilient

Expand SOC and automated response capabilities

1.19

Business Continuity and Exchange Recovery Operations

15 minutes

Near-zero (<5 min)

Extended market outage duration

Failure of resilience obligations

Systemic

Resilient

Continue exercising severe but plausible scenarios

1.20

Trading Analytics and Operational Performance Reporting

8 hours

30 minutes

Delayed operational insights

Limited regulatory effect

Operational

Resilient

Improve analytics platform redundancy

 

Establishing impact tolerances for CBS-1 Exchange Trading Services enables LSEG to define the boundaries of acceptable disruption and determine where resilience investments should be prioritised.

Exchange trading services require exceptionally low downtime and near-zero data loss, as even brief interruptions can undermine market confidence and trigger systemic consequences.

Accordingly, core trading activities—including market connectivity, matching engines, trade execution, and market data distribution—demand the most stringent tolerances and the highest resilience capabilities.

The analysis also demonstrates that resilience extends beyond technology recovery objectives.

Dependencies involving market participants, surveillance operations, regulatory obligations, cybersecurity functions, and third-party infrastructures must all operate within established thresholds.

By validating these tolerances through scenario testing and severe-but-plausible disruption exercises, LSEG can continuously improve its ability to withstand, adapt to, respond to, and recover from disruptions while preserving critical market services and maintaining trust across the financial ecosystem.

 

eBook 3: Starting Your OR Implementation
CBS-1 Exchange Trading Services
CBS-1 DP CBS-1 MD CBS-1 MPR CBS-1 ITo CBS-1 SbPS CBS-1 ST

Gain Competency: For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.

 

More Information About OR-5000 [OR-5] or OR-300 [OR-3]

To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.

If you have any questions, click to contact us.