Division 4 INTERNAL CONTROL STRUCTURE, OVERSIGHT AND ACCOUNTABILITY FRAMEWORK

Policies and procedures for monitoring the activities of the provision of a benchmark or a family of benchmarks, including those relating to:

1. (i)

   the information technology systems;

2. (ii)

   risk management, together with a mapping of risks which may arise and which may impact the accuracy, integrity and representativeness of the benchmark provided or the continuity of the activity of provision, along with the respective mitigation measures;

3. (iii)

   the constitution, role and functioning of the oversight function, as described in Article 5 of Regulation (EU) 2016/1011 and further specified in the regulatory technical standards adopted under Article 5(5) of Regulation (EU) 2016/1011^f1, including procedures for the appointment, substitution or removal of individuals within the oversight function;

4. (iv)

   the constitution, role and functioning of the control framework, as described in Article 6 of Regulation (EU) 2016/1011, including procedures for the appointment, substitution or removal of individuals responsible for this framework;

5. (v)

   the accountability framework as described in Article 7 of Regulation (EU) 2016/1011, including procedures for the appointment, substitution or removal of individuals who are responsible for this framework.

Contingency plans for determining and publishing a benchmark on a temporary basis, including business continuity, and disaster recovery plans.

Procedures for the internal reporting of infringements of Regulation (EU) 2016/1011 by managers, employees and any other natural persons whose services are placed at the applicant's disposal or under the control of the applicant.