Amendment Filed to Proposed Rule Change on Rule G-15(d)(ii) on Automated Confirmation/Acknowledgement

(A) for each transaction subject to this rule: (i) delivers a trade record to a Clearing Agency in the Clearing Agency’s format; (ii) obtains a control number for the trade record from the Clearing Agency; (iii) cross-references the control number to the confirmation and subsequent acknowledgment of the trade; and (iv) electronically delivers any acknowledgment received on the trade to the Clearing Agency and includes the control number when delivering the acknowledgment of the trade to the Clearing Agency;
(B) certifies to its customers: (i) with respect to its electronic trade confirmation/acknowledgment system, that it has a capacity requirements evaluation and monitoring process that allows the vendor to formulate current and anticipated estimated capacity requirements; (ii) that its electronic trade confirmation/acknowledgment system has sufficient capacity to process the volume of data that it reasonably anticipates to be entered into its electronic trade confirmation/acknowledgment service during the upcoming year; (iii) that its electronic trade confirmation/acknowledgment system has formal contingency procedures, that the entity has followed a formal process for reviewing the likelihood of contingency occurrences, and that the contingency protocols are reviewed, tested, and updated on a regular basis; (iv) that its electronic confirmation/acknowledgment system has a process for preventing, detecting, and controlling any potential or actual systems or computer operations failures, including any failure to interface with a Clearing Agency as described in rule G-15(d)(ii)(B)(2)(A), above, and that its procedures designed to protect against security breaches are followed; and (v) that its current assets exceed its current liabilities by at least five hundred thousand dollars;
(C) when it begins providing such services, and annually thereafter, submits an Auditor’s Report to the Commission staff which is not deemed unacceptable by the Commission staff. (An Auditor’s Report will be deemed unacceptable if it contains any findings of material weakness.);
(D) notifies the Commission staff immediately in writing of any material change to its confirmation/affirmation systems. (For purposes of this subparagraph (D) "material change" means any changes to the vendor’s systems that significantly affect or have the potential to significantly affect its electronic trade confirmation/acknowledgment systems, including: changes that: (i) affect or potentially affect the capacity or security of its electronic trade confirmation/acknowledgment system; (ii) rely on new or substantially different technology; (iii) provide a new service as part of the Qualified Vendor’s electronic trade confirmation/acknowledgment system; or (iv) affect or have the potential to adversely affect the vendor’s confirmation/acknowledgment system’s interface with a Clearing Agency.);
(E) notifies the Commission staff in writing if it intends to cease providing services;
(F) provides the Board with copies of any submissions to the Commission staff made pursuant to subparagraphs (C), (D), and (E) of this rule G-15(d)(ii)(B)(2) within ten business days.
(G) promptly supplies supplemental information regarding its confirmation/acknowledgment system when requested by the Commission staff or the Board.

(3) "Auditor’s Report" shall mean a written report which is prepared by competent, independent, external audit personnel in accordance with the standards of the American Institute of Certified Public Accountants and the Information Systems Audit and Control Association and which: (A) verifies the certifications described in subparagraph (d)(ii)(B)(2)(B) of this rule G-15; (B) contains a risk analysis of all aspects of the entity’s information technology systems including, computer operations, telecommunications, data security, systems development, capacity planning and testing, and contingency planning and testing; and (C) contains the written response of the entity’s management to the information provided pursuant to (A) and (B) of this subparagraph (d)(ii)(B)(3) of rule G-15.