The CFTC approved two final rules to enhance requirements for system safeguards testing by a derivatives clearing organization ("DCO") and additional conforming amendments. The final rules were published in the Federal Register.
The final rules are immediately effective; however, the CFTC delayed the following compliance dates for DCOs:
- vulnerability testing and security incident response plan testing is delayed to 180 days after the effective date; and
- external penetration testing, internal penetration testing, controls testing and enterprise technology risk assessment is delayed to one year after the effective date.
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.