(a)establish, implement and maintain decision-making procedures and an organisational structure which clearly and in documented manner specifies reporting lines and allocates functions and responsibilities;
(c)establish, implement and maintain adequate internal control mechanisms designed to secure compliance with decisions and procedures at all levels of the investment firm;
(g)ensure that the performance of multiple functions by their relevant persons does not and is not likely to prevent those persons from discharging any particular function soundly, honestly, and professionally.
Investment firms shall take into account sustainability risks when complying with the requirements set out in this paragraph.
When complying with the requirements set out in this paragraph, investment firms shall take into account the nature, scale and complexity of the business of the firm, and the nature and range of investment services and activities undertaken in the course of that business.
2.Investment firms shall establish, implement and maintain systems and procedures that are adequate to safeguard the security, integrity and confidentiality of information, taking into account the nature of the information in question.
3.Investment firms shall establish, implement and maintain an adequate business continuity policy aimed at ensuring, in the case of an interruption to their systems and procedures, the preservation of essential data and functions, and the maintenance of investment services and activities, or, where that is not possible, the timely recovery of such data and functions and the timely resumption of their investment services and activities.
4.Investment firms shall establish, implement and maintain accounting policies and procedures that enable them, at the request of the competent authority, to deliver in a timely manner to the competent authority financial reports which reflect a true and fair view of their financial position and which comply with all applicable accounting standards and rules.
5.Investment firms shall monitor and, on a regular basis, evaluate the adequacy and effectiveness of their systems, internal control mechanisms and arrangements established in accordance with paragraphs 1 to 4, and take appropriate measures to address any deficiencies.