• CRA-2.6 CRA-2.6 Condition 6: Systems and Controls

    • CRA-2.6.1

      Licensees must maintain systems and controls that are adequate for the scale and complexity of their activities. These systems and controls, at a minimum, must meet the requirements contained in Chapter CRA-5 (Technology Governance and Cyber Security), Chapter CRA-6 (Risk Management) and the requirements of Module HC (High-level Controls) of the CBB Rulebook Volume 6.

      Amended: April 2023
      Added: February 2019

    • CRA-2.6.2

      Licensees must maintain adequate segregation of responsibilities in their staffing arrangements, to protect against the misuse of systems or errors. Such segregation must ensure that no single individual has control over all stages of a transaction.

      Added: April 2019

    • CRA-2.6.3

      Licensees must maintain systems and controls that are adequate to address the risks of financial crime occurring in the licensee. These systems and controls must meet the minimum requirements contained in Module AML of the CBB Rulebook Volume 6.

      Amended: April 2023
      Added: February 2019

    • CRA-2.6.4

      [This Paragraph was deleted in April 2023].

      Deleted: April 2023
      Added: April 2019

    • CRA-2.6.5

      Licensees must, in connection with any client assets received in the course of their business, establish and maintain separate client accounts, segregated from those used for their own funds, as specified in Section CRA-4.5.

      Amended: April 2023
      Added: February 2019

    • CRA-2.6.6

      [This Paragraph was deleted in April 2023].

      Deleted: April 2023
      Added: April 2019

    • CRA-2.6.7

      [This Paragraph was deleted in April 2023].

      Deleted: April 2023
      Added: February 2019