1. Working Group # 7 – Report General Business and Operational Risks

2. Working Group # 7 Principle # 15 General Business Risk 1.What constitutes "compliance" with the Principle? Describe (in specific terms) the state characteristics of a CSD that fully meets the requirements of the Principle. "Comprehensive" Risk policy and Framework Effective control systems that mitigate against realization of Risks Insurance Review and revision of use of funds/budgets/forecasts Recourse to Shareholders Cost cutting exercises Board awareness - capitalization policy / Sufficient capital to support/ dividend policies

3. 2. In relation to the Key Considerations for the Principle, what metrics/data should a CSD compile in order to demonstrate compliance? How might this data be sourced? Budget reviews - timely and regular Key indicators need to be:- CSD specific Offer independence - what you can't measure you can't manage Board has applied their minds Economic indicators - International Sharing of Risk factors Working Group # 7 Principle # 15 General Business Risk

4. 3. What “result levels" with respect to these metrics/data should a CSD achieve in obtaining "compliance"? Why? Ability for ACSDA members to share but understand why these numbers may be different Benchmarking Know what we want to measure… Balanced Scorecards / Lead Indicators Working Group # 7 Principle # 15 General Business Risk

5. 4. What, if any, provisions should you (as an FMI) be making to ensure continued adherence to the principle (s), for example in times of market or operational distress? In times of war… plans are the first casualty of battle Contingency planning Testing Good governance principles and policies Working Group # 7 Principle # 15 General Business Risk

6. 1.What constitutes "compliance" with the Principle? Describe (in specific terms) the state characteristics of a CSD that fully meets the requirements of the Principle. Sound Investment policy Quality of investment Liquidity profile Segregation of assets Working Group # 7 Principle # 16 Custody and Investment Risk

7. 2. In relation to the Key Considerations for the Principle, what metrics/data should a CSD compile in order to demonstrate compliance? How might this data be sourced? Control standards for Participants - verified by External Auditors Know what we want to measure… Balanced Scorecards / Lead Indicators Working Group # 7 Principle # 16 Custody and Investment Risk

8. 3. What “result levels" with respect to these metrics/data should a CSD achieve in obtaining "compliance"? Why? No standard but organization-specific - ideally need to start building up data in order to be able to map trends going forward Working Group # 7 Principle # 16 Custody and Investment Risk

9. 4. What, if any, provisions should you (as an FMI) be making to ensure continued adherence to the principle(s), for example in times of market or operational distress? In times of war… plans are the first casualty of battle Contingency planning Testing Good governance principles and policies Working Group # 7 Principle # 16 Custody and Investment Risk

10. 1.What constitutes "compliance" with the Principle? Describe (in specific terms) the state characteristics of a CSD that fully meets the requirements of the Principle. In addition to many of the issues listed under 15 we also need to include:- Appropriate operational resilience - Robust, effective Business Continuity Planning Comprehensive assessment of interdependencies - up and down! Working Group # 7 Principle # 17 Operational Risk

11. 2. In relation to the Key Considerations for the Principle, what metrics/data should a CSD compile in order to demonstrate compliance? How might this data be sourced? Control standards for Participants - verified by External Auditors Know what we want to measure… Balanced Scorecards Lead Indicators Working Group # 7 Principle # 17 Operational Risk

12. 3. What “result levels" with respect to these metrics/data should a CSD achieve in obtaining "compliance"? Why? No standard but organization-specific - ideally need to start building up data in order to be able to map trends going forward Working Group # 7 Principle # 17 Operational Risk

13. 4. What, if any, provisions should you (as an FMI) be making to ensure continued adherence to the principle(s), for example in times of market or operational distress? In times of war… plans are the first casualty of battle Contingency planning Testing Good governance principles and policies Working Group # 7 Principle # 17 Operational Risk