Division 4

A credit rating agency shall have sound administrative and accounting procedures, internal control mechanisms, effective procedures for risk assessment, and effective control and safeguard arrangements for information processing systems.

Those internal control mechanisms shall be designed to secure compliance with decisions and procedures at all levels of the credit rating agency.

A credit rating agency shall implement and maintain decision-making procedures and organisational structures which clearly and in a documented manner specify reporting lines and allocate functions and responsibilities.