Market Infrastructure Institutions must implement a...

Market Infrastructure Institutions must implement a system-driven IT Resilience Index to measure the robustness of critical IT systems and related systems. The Index covers availability, security, integrity, governance, reliability and monitoring, business continuity, modularity and flexibility, scalability, and incident handling. Institutions must compute the Index half-yearly, submit comparative results and corrective actions to their technology committee and governing board, and limit manual data retrieval to exceptions discussed with the technology committee. They must also establish an early warning system, continuous service-delivery dashboards, and monitoring procedures. The framework, including early warning and real-time monitoring, must be operational by February 28, 2027, with the first computation for the half-year ending March 31, 2027.