For a market infrastructure organisation such as London Stock Exchange Group (LSEG), defining impact tolerances for critical business services is a central requirement of operational resilience. are among the most time-sensitive and systemically important services in the financial ecosystem, as
Exchange Trading Services are among the most time-sensitive and systemically important services in the financial ecosystem, as disruptions can rapidly affect market integrity, investor confidence, liquidity, price discovery, and regulatory obligations.
Regulatory authorities increasingly expect financial market infrastructures to identify the maximum level of disruption they can tolerate before causing intolerable harm to customers, counterparties, or the broader financial system.
Consistent with operational resilience guidance and the principle outlined in "[OR] [P2-S3] What is Impact Tolerance in Operational Resilience?", impact tolerance should focus on outcomes experienced by customers and markets rather than solely on internal recovery objectives.
For LSEG’s CBS-1 Exchange Trading Services, impact tolerances are established by considering maximum tolerable downtime (MTD), maximum tolerable data loss (MTDL), customer and regulatory consequences, systemic market impact, and current resilience capabilities.
The objective is to ensure that critical trading activities remain within acceptable disruption thresholds under severe but plausible scenarios.
Table P4: Establish Impact Tolerance for CBS-1
|
Sub-CBS Code |
Sub-CBS |
Maximum Tolerable Downtime (MTD) |
Maximum Tolerable Data Loss (MTDL) |
Customer Impact |
Regulatory Impact |
Impact Type |
Current Resilience Status |
Action Required |
|
1.1 |
Market Participant Onboarding and Membership Management |
24 hours |
15 minutes |
Delayed onboarding and market access |
Moderate compliance exposure |
Operational / Regulatory |
Resilient |
Increase automation and workflow redundancy |
|
1.2 |
Customer Identification and Regulatory Validation |
8 hours |
Near-zero (<5 min) |
Regulatory approval delays |
High KYC/AML compliance exposure |
Regulatory |
Partially resilient |
Enhance regulatory data validation and backup processes |
|
1.3 |
Trading Account Setup and Access Provisioning |
4 hours |
Near-zero (<5 min) |
Participants unable to trade |
Significant market access impact |
Customer / Operational |
Resilient |
Strengthen identity provisioning recovery capability |
|
1.4 |
Trading Platform Connectivity and Session Establishment |
15 minutes |
Zero data loss |
Trading access interruption |
High market conduct implications |
Systemic / Customer |
Highly resilient |
Maintain multi-site connectivity resilience |
|
1.5 |
Instrument and Product Configuration Management |
2 hours |
15 minutes |
Incorrect products available for trading |
Compliance and market integrity risk |
Operational / Regulatory |
Resilient |
Improve automated configuration controls |
|
1.6 |
Market Data Feed Distribution and Synchronisation |
5 minutes |
Zero data loss |
Market participants receive stale pricing |
Severe transparency concerns |
Systemic |
Highly resilient |
Enhance feed failover mechanisms |
|
1.7 |
Order Entry and Capture Processing |
5 minutes |
Zero data loss |
Inability to place orders |
Immediate market disruption |
Customer / Systemic |
Highly resilient |
Expand real-time transaction replication |
|
1.8 |
Pre-Trade Risk and Control Validation |
10 minutes |
Zero data loss |
Trades processed without controls |
Breach of market risk obligations |
Financial / Regulatory |
Highly resilient |
Strengthen control failover validation |
|
1.9 |
Order Routing and Matching Engine Processing |
Near real-time (<2 min) |
Zero data loss |
Trading ceases |
Severe systemic market impact |
Systemic |
Highly resilient |
Continue active-active architecture enhancement |
|
1.10 |
Trade Execution Processing |
Near real-time (<2 min) |
Zero data loss |
Execution failures and pricing uncertainty |
Significant market integrity breach |
Systemic |
Highly resilient |
Maintain ultra-low latency recovery mechanisms |
|
1.11 |
Trading Session and Market State Management |
10 minutes |
Zero data loss |
Market open/close disruptions |
Exchange operational breach |
Regulatory / Systemic |
Highly resilient |
Improve automated state synchronization |
|
1.12 |
Market Surveillance and Trade Monitoring |
30 minutes |
5 minutes |
Delayed fraud detection |
Regulatory penalties likely |
Regulatory |
Resilient |
Enhance AI-assisted monitoring resilience |
|
1.13 |
Exception Handling and Trade Intervention Management |
1 hour |
15 minutes |
Unresolved trade exceptions |
Operational escalation risk |
Operational |
Resilient |
Improve workflow orchestration and backup |
|
1.14 |
Circuit Breaker and Volatility Control Administration |
5 minutes |
Zero data loss |
Market instability during volatility events |
Significant regulatory concern |
Systemic |
Highly resilient |
Increase automated testing of volatility controls |
|
1.15 |
Clearing and Settlement Integration Processing |
30 minutes |
Near-zero (<5 min) |
Post-trade settlement delays |
Financial market infrastructure impact |
Financial / Third-party |
Resilient |
Strengthen integration recovery testing |
|
1.16 |
Regulatory Reporting and Compliance Monitoring |
4 hours |
15 minutes |
Delayed reporting obligations |
Direct regulatory non-compliance |
Regulatory |
Resilient |
Enhance reporting automation and contingency procedures |
|
1.17 |
Reference Data and Master Data Administration |
2 hours |
15 minutes |
Incorrect market reference information |
Data governance concerns |
Operational |
Resilient |
Increase integrity validation automation |
|
1.18 |
Cybersecurity Monitoring and Trading Infrastructure Protection |
15 minutes |
Zero data loss |
Increased cyber attack exposure |
Severe supervisory concern |
Cyber / Operational |
Highly resilient |
Expand SOC and automated response capabilities |
|
1.19 |
Business Continuity and Exchange Recovery Operations |
15 minutes |
Near-zero (<5 min) |
Extended market outage duration |
Failure of resilience obligations |
Systemic |
Resilient |
Continue exercising severe but plausible scenarios |
|
1.20 |
Trading Analytics and Operational Performance Reporting |
8 hours |
30 minutes |
Delayed operational insights |
Limited regulatory effect |
Operational |
Resilient |
Improve analytics platform redundancy |
Establishing impact tolerances for CBS-1 Exchange Trading Services enables LSEG to define the boundaries of acceptable disruption and determine where resilience investments should be prioritised.
Exchange trading services require exceptionally low downtime and near-zero data loss, as even brief interruptions can undermine market confidence and trigger systemic consequences.
Accordingly, core trading activities—including market connectivity, matching engines, trade execution, and market data distribution—demand the most stringent tolerances and the highest resilience capabilities.
The analysis also demonstrates that resilience extends beyond technology recovery objectives.
Dependencies involving market participants, surveillance operations, regulatory obligations, cybersecurity functions, and third-party infrastructures must all operate within established thresholds.
By validating these tolerances through scenario testing and severe-but-plausible disruption exercises, LSEG can continuously improve its ability to withstand, adapt to, respond to, and recover from disruptions while preserving critical market services and maintaining trust across the financial ecosystem.
| eBook 3: Starting Your OR Implementation |
|||||
| CBS-1 Exchange Trading Services | |||||
| CBS-1 DP | CBS-1 MD | CBS-1 MPR | CBS-1 ITo | CBS-1 SbPS | CBS-1 ST |
To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.
|
If you have any questions, click to contact us. |
||
|
|