In a bid to fully digitize Nigerian capital market operations, the Securities and Exchange Commission is offering guidelines that will enable capital market investors to be able to do virtually anything they need to do on their internet-connected and mobile-enabled devices. their convenience.
These are contained in a guideline on Minimum Operating Standards for Information Technology for Capital Markets Operators (CMOS) recently exposed to the public.
According to the SEC, the new regulatory framework being revised aims to impose the mandatory adoption of information and communication technologies (ICTs), in particular web-based applications and devices, for virtual transactions on the capital market.
The provisions of the document apply to all categories of CMOs, except in sections where reference is otherwise made to specific categories of CMOs. The objective of the guidelines is to establish a threshold of operational efficiency in the Nigerian capital market through the effective adoption of information technology to conduct business operations and ensure security, confidentiality, integrity and the reliability of information systems.
A draft copy of the framework indicates that the new framework, once approved, will apply to all capital markets operations, with particular emphasis on investor-facing functions such as securities trading, fund management, share registration and clearing and custody services, among others. .
The new rules require all capital market operators to have a well-secured and functioning website as well as a functioning email system, either hosted privately or using a cloud service provider, with a name domain owned and registered by the capital market operator. Once the rules come into force, the use of free email providers and private email providers like Yahoomail, Gmail and Hotmail, among others, will become unacceptable for official transactions.
Under the proposed framework, securities dealers will be “required to have websites and web applications that allow investors to securely create and manage their online stock accounts, make inquiries and receive customer support using chatbots or other interactive programs from web browsers. As the largest and most important business group, digitization of brokerage operations is expected to improve market accessibility for retail investors and drive market penetration and inclusion.
According to the guidelines, “All CMOs are required to have a functioning website, websites must contain correct, current and relevant information, websites must not display errors or system messages revealing information on the underlying configuration of web applications, websites must use the network protocol HTTPS (not just HTTP) and other measures to ensure secure interoperability, adequate security measures must be in place to ensure protection against availability attacks (especially denial of service attacks), integrity attacks and confidentiality attacks, as well as regular audits and vulnerability testing must be carried out to identify and correct vulnerabilities in systems. underlying operations, databases, web servers and third-party software/applications.”
“Applicable system and web application updates (patches) should be regularly applied as they become available, access to databases and back-end systems should only be possible through front-end web applications and not directly from the Internet, and should grant only minimal privileges to databases and back-end systems, websites that allow file downloads should check file types and scan for malicious code. Website must be wholly domiciled in the CMO and not a third party and the development, hosting and maintenance of the Websites may involve third parties, in which case all applicable requirements set forth herein to ensure availability, confidentiality and integrity of the website must be included as mandatory elements of the contract terms and SLA.”
In addition, fund and asset managers, who manage the country’s burgeoning collective investment funds, will also be mandated to “have websites and web applications that allow investors to securely create and manage security of online investment accounts, making inquiries using chat-bots or other interactive programs from web browsers.
Fund and asset managers are also “required to have mobile apps that provide free access to their entire service offering and allow retail investors to securely create and manage investment accounts. investing online, making inquiries and receiving integrated customer support.
In a major move that could finally close the gap that fuels unclaimed dividends, all registrars, central securities depositories and clearing houses will now be required to digitize their operations, as a regulatory requirement rather than a as an optional service.
The guideline also states that all central securities depositories and clearing houses must have databases integrated with APIs that registrars and brokers can populate pursuant to SEC approval, while all registrars, Central securities depositories and clearing houses are required to have websites and web applications that allow investors to securely create and manage their online profiles, ask questions and receive customer support using chatbots or other interactive programs from web browsers.
Additionally, custodians and trustees are required to have websites and web applications that allow their customers to securely create and manage their online accounts, make inquiries and receive customer support. using chatbots or other interactive programs from their web browsers.
While securities exchanges had made autonomous efforts to automate their systems, the new rules require all exchanges, including equity, debt, derivatives and commodities exchanges, to “have secure trading with robust features that include real-time quotes, charting tools, news feeds, trade monitoring and premium research”. All exchanges are also required to “have a monitoring system that provides live tracking real time of all trading activities”.
According to the SEC, the objective of the new framework “is to establish a threshold of operational efficiency in the Nigerian capital market through the effective adoption of information technology to conduct business operations and provide security, confidentiality, integrity and reliability of information systems.
The SEC noted that given the increased reliance of financial services and related business operations on technology, there is an urgent need to put in place rules defining minimum operating standards for the use of information technology. information by all capital market operators.
“This will help operators harness the huge operational benefits that come from adopting the technology and also manage the cybersecurity threats and other risks that come with using the technology. It would also have a positive impact on the effectiveness and efficiency of the Commission to oversee and regulate all capital market operators in the market,” the SEC said.
YOU SHOULD NOT MISS THESE NIGERIAN TRIBUNE HEADLINES
We haven’t had a water supply for months ― Residents of Abeokuta
Despite the huge investment in the water sector by the government and international organizations, water scarcity has become a permanent nightmare for the people of Abeokuta, the capital of Ogun State. This report reviews the lives and experiences of residents getting clean, safe, and affordable water amid the surge in COVID-19 cases in the state… SEC sets guidelines. SEC sets guidelines
Selfies, video calls and Chinese documentaries: what you will encounter on the Lagos-Ibadan train
The Lagos-Ibadan Railway was inaugurated recently for fully paid operation by the Nigerian Railway Corporation after about a year of free trial. Our reporter joined the train from Lagos to Ibadan and back and recounts his experience in this report… The SEC sets guidelines. SEC sets guidelines