(a) For purposes of this section, the following terms are defined as follows:

(1) Examinations expert is defined as a Nationally recognized accounting and auditing firm with substantial expertise in audits of futures commission merchants, risk assessment and internal control reviews, and is an accounting and auditing firm that is acceptable to the Commission; and

(2) Self-regulatory organization means a contract market (as defined in §1.3) or a registered futures association under section 17 of the Act. The term “self-regulatory organization” for purpose of this section does not include a swap execution facility (as defined in §1.3).

(b)

(1) Each self-regulatory organization must adopt rules prescribing minimum financial and related reporting requirements for members who are registered futures commission merchants or registered retail foreign exchange dealers. Each self-regulatory organization other than a contract market must adopt rules prescribing minimum financial and related reporting requirements for members who are registered introducing brokers. The self-regulatory organization's minimum financial and related reporting requirements must be the same as, or more stringent than, the requirements contained in §§1.10 and 1.17, for futures commission merchants and introducing brokers, and §§5.7 and 5.12 of this chapter for retail foreign exchange dealers; provided, however, that a self-regulatory organization may permit its member registrants that are registered with the Securities and Exchange Commission as securities brokers or dealers to file (in accordance with §1.10(h)) a copy of their Financial and Operational Combined Uniform Single Report under the Securities Exchange Act of 1934 (“FOCUS Report”), Part II, Part IIA, or Part II CSE, as applicable, in lieu of Form 1-FR; provided, further, that such self-regulatory organization must require such member registrants to provide all information in Form 1-FR that is not included in the FOCUS Report Part II, Part IIA, or Part CSE provided by such member registrant. The definition of adjusted net capital must be the same as that prescribed in §1.17(c) for futures commission merchants and introducing brokers, and §5.7(b)(2) of this chapter for futures commission merchants offering or engaging in retail forex transactions and for retail foreign exchange dealers.

(2) In addition to the requirements set forth in paragraph (b)(1) of this section, each self-regulatory organization that has a futures commission merchant member registrant must adopt rules prescribing risk management requirements for futures commission merchant member registrants that shall be the same as, or more stringent than, the requirements contained in §1.11.

(c)

(1) Each self-regulatory organization must establish and operate a supervisory program that includes written policies and procedures concerning the application of such supervisory program in the examination of its member registrants for the purpose of assessing whether each member registrant is in compliance with the applicable self-regulatory organization and Commission regulations governing minimum net capital and related financial requirements, the obligation to segregate customer funds, risk management requirements, financial reporting requirements, recordkeeping requirements, and sales practice and other compliance requirements. The supervisory program also must address the following elements:

(i) Adequate levels and independence of examination staff. A self-regulatory organization must maintain staff of an adequate size, training, and experience to effectively implement a supervisory program. Staff of the self-regulatory organization, including officers, directors, and supervising committee members, must maintain independent judgment and its actions must not impair its independence nor appear to impair its independence in matters related to the supervisory program. The self-regulatory organization must provide annual ethics training to all staff with responsibilities for the supervisory program.

(ii) Ongoing surveillance. A self-regulatory organization's ongoing surveillance of member registrants must include the review and analysis of financial reports and regulatory notices filed by member registrants with the designated self-regulatory organization.

(iii) High-risk firms. A self-regulatory organization's supervisory program must include procedures for identifying member registrants that are determined to pose a high degree of potential financial risk, including the potential risk of loss of customer funds. High-risk member registrants must include firms experiencing financial or operational difficulties, failing to meet segregation or net capital requirements, failing to maintain current books and records, or experiencing material inadequacies in internal controls. Enhanced monitoring for high risk firms should include, as appropriate, daily review of net capital, segregation, and secured calculations, to assess compliance with self-regulatory organization and Commission requirements.

(iv) On-site examinations.

(A) A self-regulatory organization must conduct routine periodic on-site examinations of member registrants. Member futures commission merchants and retail foreign exchange dealers must be subject to on-site examinations no less frequently than once every eighteen months. A self-regulatory organization shall establish a risk-based method of establishing the scope of each on-site examination; provided, however, that the scope of each on-site examination of a futures commission merchant or retail foreign exchange dealer must include an assessment of whether the registrant is in compliance with applicable Commission and self-regulatory organization minimum capital, customer fund protection, recordkeeping, and reporting requirements.

(B) A self-regulatory organization other than a contract market must establish the frequency of on-site examinations of member introducing brokers that do not operate pursuant to guarantee agreements with futures commission merchants or retail foreign exchange dealers using a risk-based approach, which takes into consideration the time elapsed since the self-regulatory organization's previous examination of the introducing broker.

(C) A self-regulatory organization must conduct on-site examinations of member registrants in accordance with uniform examination programs and procedures that have been submitted to the Commission.

(v) Adequate documentation. A self-regulatory organization must adequately document all aspects of the operation of the supervisory program, including the conduct of risk-based scope setting and the risk-based surveillance of high-risk member registrants, and the imposition of remedial and punitive action(s) for material violations.

(2) In addition to the requirements set forth in paragraph (c)(1) of this section, the supervisory program of a self-regulatory organization that has a registered futures commission merchant member must satisfy the following requirements:

(i) The supervisory program must set forth in writing the examination standards that the self-regulatory organization must apply in its examination of its registered futures commission merchant member. The supervisory program must be based on controls testing and substantive testing, and must address all areas of risk to which the futures commission merchant can reasonably be foreseen to be subject. The supervisory program must be based on an understanding of the internal control environment to determine the nature, timing and extent of the controls and substantive testing to be performed. The determination as to which elements of the supervisory program are to be performed on any examination must be based on the risk profile of each registered futures commission merchant member.

(ii) The supervisory program must, at a minimum, have examination standards addressing the following:

(A) The ethics of an examiner;

(B) The independence of an examiner;

(C) The supervision, review, and quality control of an examiner's work product;

(D) The evidence and documentation to be reviewed and retained in connection with an examination;

(E) The sampling size and techniques used in an examination;

(F) The examination risk assessment process;

(G) The examination planning process;

(H) Materiality assessment;

(I) Quality control procedures to ensure that the examinations maintain the level of quality expected;

(J) Communications between an examiner and the regulatory oversight committee, or the functional equivalent of the regulatory oversight committee, of the self-regulatory organization of which the futures commission merchant is a member;

(K) Communications between an examiner and a futures commission merchant's audit committee of the board of directors or other similar governing body;

(L) Analytical review procedures;

(M) Record retention; and

(N) Required items for inclusion in the examination report, such as repeat violations, material items, and high risk issues. The examination report is intended solely for the information and use of the self-regulatory organizations and the Commission, and is not intended to be and should not be used by any other person or entity.

(iii)

(A) Prior to the initial implementation of the supervisory program, a self-regulatory organization must engage an examinations expert to evaluate the examination standards for consistency with auditing standards issued by the Public Company Accounting Oversight Board as such auditing standards are applicable in the context of the self-regulatory organization's examination of its futures commission merchant members. At least once every five years after the initial implementation of the supervisory program, a self-regulatory organization must engage an examinations expert to evaluate the examination standards for consistency with any new or amended auditing standards issued by the Public Company Accounting Oversight Board since the previous review performed by the examinations expert. At the conclusion of each evaluation, a self-regulatory organization must obtain a written report from the examinations expert in accordance with paragraph (c)(2)(iii)(C) of this section.

(B) Notwithstanding paragraph (c)(2)(iii)(A) of this section, a self-regulatory organization must review any new or amended auditing standards issued by the Public Company Accounting Oversight Board, and must revise its examination standards promptly to reflect any changes in such auditing standards that are applicable in the context of the self-regulatory organization's examination of its futures commission merchant members. A self-regulatory organization must engage an examinations expert to evaluate any material revisions that the self-regulatory organization makes to the examination standards to conform such standards with the Public Company Accounting Oversight Board's auditing standards, or if directed to engage an examinations expert by the Director of the Division of Swap Dealer and Intermediary Oversight. At the conclusion of each review, a self-regulatory organization must obtain a written report from the examinations expert in accordance with paragraph (c)(2)(iii)(C) of this section.

(C) At the conclusion of the examinations expert's engagement pursuant to paragraph (c)(2)(iii)(A) or (B) of this section, the self-regulatory organization must obtain from the examinations expert a written report on findings and recommendations issued under the consulting services standards of the American Institute of Certified Public Accountants. The self-regulatory organization must provide the Director of the Division of Swap Dealer and Intermediary Oversight with a copy of the examinations expert's written report, and the self-regulatory organization's written responses to any of the examinations expert's findings and recommendations, within thirty days of the receipt thereof. Upon resolution of any questions or comments raised by the Division of Swap Dealer and Intermediary Oversight, and upon written notice from the Division of Swap Dealer and Intermediary Oversight that it has no further comments or questions on the examinations standards as amended (by reason of the examinations expert's proposals, consideration of the Division of Swap Dealer and Intermediary Oversight's questions or comments, or otherwise), the self-regulatory organization shall commence applying such examinations standards for examining its registered futures commission merchant members for all examinations conducted with an “as of” date later than the date of the Division of Swap Dealer and Intermediary's written notification.

(iv) The supervisory program must require the self-regulatory organization to report to its risk and/or audit committee of the board of directors, or a functional equivalent committee, with timely reports of the activities and findings of the supervisory program to assist the risk and/or audit committee of the board of directors, or a functional equivalent committee, to fulfill its responsibility of overseeing the examination function.

(v) The examinations expert's written report, the self-regulatory organization's response, if any, as well as any information concerning the supervisory program is confidential.

(d)

(1) Any two or more self-regulatory organizations may file with the Commission a plan for delegating to a designated self-regulatory organization, for any registered futures commission merchant, retail foreign exchange dealer, or introducing broker that is a member of more than one such self-regulatory organization, the function of:

(i) Monitoring and examining for compliance with the minimum financial and related reporting requirements and risk management requirements, including policies and procedures relating to the receipt, holding, investing and disbursement of customer funds, adopted by such self-regulatory organizations and the Commission in accordance with paragraphs (b) and (c) of this section; and

(ii) Receiving the financial reports and notices necessitated by such minimum financial and related reporting requirements; provided, however, that the self-regulatory organization that delegates the functions set forth in this paragraph (d)(1) shall remain responsible for its member registrants' compliance with the regulatory obligations, and if such self-regulatory organization becomes aware that a delegated function is not being performed as required under this section, the self-regulatory organization shall promptly take any necessary steps to address any noncompliance.

(2) If a plan established pursuant to paragraph (d)(1) of this section applies to any registered futures commission merchant, then such plan must include the following elements:

(i) The Joint Audit Committee. The self-regulatory organizations that choose to participate in the plan shall form a Joint Audit Committee, consisting of all self-regulatory organizations in the plan as members. The members of the Joint Audit Committee shall establish, operate and maintain a Joint Audit Program in accordance with the requirements of this section to ensure an effective and a high quality program for examining futures commission merchants, to designate the designated self-regulatory organizations that will be responsible for the examinations of futures commission merchants pursuant to the Joint Audit Program, and to satisfy such additional obligations set forth in this section in order to facilitate the examinations of futures commission merchants by their respective designated self-regulatory organizations.

(ii) The Joint Audit Program. The Joint Audit Program must, at minimum, satisfy the following requirements.

(A) The purpose of the Joint Audit Program must be to assess whether each registered futures commission merchant member of the Joint Audit Committee self-regulatory organization members is in compliance with the Joint Audit Program and Commission regulations governing minimum net capital and related financial requirements, the obligation to segregate customer funds, risk management requirements, including policies and procedures relating to the receipt, holding, investment, and disbursement of customer funds, financial reporting requirements, recordkeeping requirements, and sales practice and other compliance requirements.

(B) The Joint Audit Program must include written policies and procedures concerning the application of the Joint Audit Program in the examination of the registered futures commission merchant members of the Joint Audit Committee self-regulatory organization members.

(C)

(1) Adequate levels and independence of examination staff. A designated self-regulatory organization must maintain staff of an adequate size, training, and experience to effectively implement the Joint Audit Program. Staff of the designated self-regulatory organization, including officers, directors, and supervising committee members, must maintain independent judgment and its actions must not impair its independence nor appear to impair its independence in matters related to the Joint Audit Program. The designated self-regulatory organization must provide annual ethics training to all staff with responsibilities for the Joint Audit Program.

(2) Ongoing surveillance. A designated self-regulatory organization's ongoing surveillance of futures commission merchant member registrants over which it has oversight responsibilities must include the review and analysis of financial reports and regulatory notices filed by such member registrants with the designated self-regulatory organization.

(3) High-risk firms. The Joint Audit Program must include procedures for identifying futures commission merchant member registrants over which it has oversight responsibilities that are determined to pose a high degree of potential financial risk, including the potential risk of loss of customer funds. High-risk member registrants must include firms experiencing financial or operational difficulties, failing to meet segregation or net capital requirements, failing to maintain current books and records, or experiencing material inadequacies in internal controls. Enhanced monitoring for high risk firms should include, as appropriate, daily review of net capital, segregation, and secured calculations, to assess compliance with self-regulatory and Commission requirements.

(4) On-site examinations. A designated self-regulatory organization must conduct routine periodic on-site examinations of futures commission merchant member registrants over which it has oversight responsibilities. Such member registrants must be subject to on-site examinations no less frequently than once every eighteen months. A designated self-regulatory organization shall establish a risk-based method of establishing the scope of each on-site examination, provided, however, that the scope of each on-site examination of a futures commission merchant must include an assessment of whether the registrant is in compliance with applicable Commission and self-regulatory organization minimum capital, customer fund protection, recordkeeping, and reporting requirements. A designated self-regulatory organization must conduct on-site examinations of futures commission merchant registrants in accordance with the Joint Audit Program.

(D) The Joint Audit Committee members must adequately document all aspects of the operation of the Joint Audit Program, including the conduct of risk-based scope setting and the risk-based surveillance of high-risk member registrants, and the imposition of remedial and punitive action(s) for material violations.

(E) The Joint Audit Program must set forth in writing the examination standards that a designated self-regulatory organization must apply in its examination of a registered futures commission merchant. The Joint Audit Program must be based on controls testing and substantive testing, and must address all areas of risk to which the futures commission merchant can reasonably be foreseen to be subject. The Joint Audit Program must be based on an understanding of the internal control environment to determine the nature, timing and extent of the controls and substantive testing to be performed. The determination as to which elements of the Joint Audit Program are to be performed on any examination must be based on the risk profile of each registered futures commission merchant.

(F) The Joint Audit Program must include examination standards addressing the items listed in paragraph (c)(2)(ii) of this section.

(G)

(1) Prior to the initial implementation of the Joint Audit Program, the Joint Audit Committee must engage an examinations expert to evaluate the examination standards for consistency with auditing standards issued by the Public Company Accounting Oversight Board as such auditing standards are applicable in the context of the Joint Audit Committee's examination of its futures commission merchant members. At least once every five years after the initial implementation of the Joint Audit Program, the Joint Audit Committee must engage an examinations expert to evaluate the examination standards for consistency with any new or amended auditing standards issued by the Public Company Accounting Oversight Board since the previous review performed by the examinations expert. At the conclusion of each review, the Joint Audit Committee must obtain a written report from the examinations expert in accordance with paragraph (d)(2)(ii)(G)(3) of this section.

(2) Notwithstanding paragraph (d)(2)(ii)(G)(1) of this section, the Joint Audit Committee must review any new or amended auditing standards issued by the Public Company Accounting Oversight Board, and must revise its examination standards promptly to reflect any changes in such auditing standards that are applicable in the context of the Joint Audit Committee's examination of its futures commission merchant members. The Joint Audit Committee must engage an examinations expert to evaluate any material revisions that the Joint Audit Committee makes to the examination standards to conform such standards with the Public Company Accounting Oversight Board's auditing standards, or if directed to engage an examinations expert by the Director of the Division of Swap Dealer and Intermediary Oversight. The Joint Audit Committee must obtain a written report from the examinations expert in accordance with paragraph (d)(2)(ii)(G)(3) of this section.

(3) At the conclusion of the examinations expert's engagement pursuant to paragraph (d)(2)(ii)(G)(1) or (2) of this section, the Joint Audit Committee must obtain from the examinations expert a written report on findings and recommendations issued under the consulting services standards of the American Institute of Certified Public Accountants. The Joint Audit Committee must provide the Director of the Division of Swap Dealer and Intermediary Oversight with a copy of the examinations expert's written report, and the Joint Audit Committee's written responses to any of the examinations expert's findings and recommendations, within thirty days of the receipt thereof. Upon resolution of any questions or comments raised by the Division of Swap Dealer and Intermediary Oversight, and upon written notice from the Division of Swap Dealer and Intermediary Oversight that it has no further comments or questions on the examinations standards as amended (by reason of the examinations expert's proposals, consideration of the Division of Swap Dealer and Intermediary Oversight's questions or comments, or otherwise), the Joint Audit Committee shall commence applying such examinations standards for examining its registered futures commission merchant members for all examinations conducted with an “as of” date later than the date of the Division of Swap Dealer and Intermediary's written notification.

(H) The Joint Audit Program must require the Joint Audit Committee members to report to their respective risk and/or audit committee of their respective board of directors, or a functional equivalent committee, with timely reports of the activities and findings of the Joint Audit Program to assist the risk and/or audit committee of the board of directors, or a functional equivalent committee, to fulfill its responsibility of overseeing the examination function.

(I) The examinations expert's written report, the Joint Audit Committee's response, if any, as well as any information concerning the supervisory program is confidential.

(iii) Meetings of the Joint Audit Committee.

(A) The Joint Audit Committee members must meet at least once each year. During such meetings, the Joint Audit Committee members shall consider revisions to the Joint Audit Program as a result of regulatory changes, revisions to the examination standards resulting from new or amended auditing standards issued by the Public Company Accounting Oversight Board, or the results of an examinations expert's review.

(B) In addition to the items considered in paragraph (d)(2)(iii)(A) of this section, the Joint Audit Committee members must consider the following items during the meetings:

(1) Coordinating and sharing information between the Joint Audit Committee members, including issues and industry concerns in connection with examinations of futures commission merchants;

(2) Identifying industry regulatory reporting issues and financial and operational internal control issues and modifying the Joint Audit Program accordingly;

(3) Issuing risk alerts for futures commission merchants and/or designated self-regulatory organization examiners on an as-needed basis;

(4) Responding to industry issues; and

(5) Providing industry feedback to Commission proposals.

(C) Minutes must be taken of all meetings and distributed to all members on a timely basis.

(D) The Director of the Division of Swap Dealer and Intermediary Oversight must receive timely prior notice of each meeting, have the right to attend and participate in each meeting and receive written copies of the minutes required pursuant to paragraph (d)(2)(iii)(C) of this section, respectively.

(3) The plan referenced in paragraph (d)(1) of this section shall not be effective without Commission approval pursuant to paragraph (h) of this section.

(e) Any plan filed under this section may contain provisions for the allocation of expenses reasonably incurred by designated self-regulatory organizations among the self-regulatory organizations participating in such a plan.

(f) A plan's designated self-regulatory organizations must report to:

(1) That plan's other self-regulatory organizations any violation of such other self-regulatory organizations' rules and regulations for which the responsibility to monitor or examine has been delegated to such designated self-regulatory organization under this section; and

(2) The Director of the Division of Swap Dealer and Intermediary Oversight of the Commission any violation of a self-regulatory organization's rules and regulations or any violation of the Commission's regulations for which the responsibility to monitor, audit, or examine has been delegated to such designated self-regulatory organization under this section.

(g) The Joint Audit Committee members may, among themselves, establish programs to provide access to any necessary financial or related information.

(h) After appropriate notice and opportunity for comment, the Commission may, by written notice, approve such a plan, or any part of the plan, if it finds that the plan, or any part of it:

(1) Is necessary or appropriate to serve the public interest;

(2) Is for the protection and in the interest of customers;

(3) Reduces multiple monitoring and multiple examining for compliance with the minimum financial rules of the Commission and of the self-regulatory organizations submitting the plan of any futures commission merchant, retail foreign exchange dealer, or introducing broker that is a member of more than one self-regulatory organization;

(4) Reduces multiple reporting of the financial information necessitated by such minimum financial and related reporting requirements by any futures commission merchant, retail foreign exchange dealer, or introducing broker that is a member of more than one self-regulatory organization;

(5) Fosters cooperation and coordination among the self-regulatory organizations; and

(6) Does not hinder the development of a registered futures association under section 17 of the Act.

(i) After the Commission has approved a plan, or part thereof, under paragraph (h) of this section, a self-regulatory organization delegating the functions described in paragraph (d)(1) of this section must notify each of its members that are subject to such a plan:

(1) Of the limited scope of the delegating self-regulatory organization's responsibility for such a member's compliance with the Commission's and self-regulatory organization's minimum financial and related reporting requirements; and

(2) Of the identity of the designated self-regulatory organization that has been delegated responsibility for such a member; provided, however, that the self-regulatory organization that delegates, pursuant to paragraph (d) of this section, the functions set forth in paragraphs (b) and (c) of this section shall remain responsible for its member registrants' compliance with the regulatory obligations, and if such self-regulatory organization becomes aware that a delegated function is not being performed as required under this section, the self-regulatory organization shall promptly take any necessary steps to address any noncompliance.

(j) The Commission may at any time, after appropriate notice and opportunity for hearing, withdraw its approval of any plan, or part thereof, established under this section, if such plan, or part thereof, ceases to adequately effectuate the purposes of section 4f(b) of the Act or of this section.

(k) Whenever a registered futures commission merchant, a registered retail foreign exchange dealer, or a registered introducing broker holding membership in a self-regulatory organization ceases to be a member in good standing of that self-regulatory organization, such self-regulatory organization must, on the same day that event takes place, give electronic notice of that event to the Commission at its Washington, DC, headquarters and send a copy of that notification to such futures commission merchant, retail foreign exchange dealer, or introducing broker.

(l) Nothing in this section shall preclude the Commission from examining any futures commission merchant, retail foreign exchange dealer, or introducing broker for compliance with the minimum financial and related reporting requirements, and the risk management requirements, as applicable, to which such futures commission merchant, retail foreign exchange dealer, or introducing broker is subject.

(m) In the event a plan is not filed and/or approved for each registered futures commission merchant, retail foreign exchange dealer, or introducing broker that is a member of more than one self-regulatory organization, the Commission may design and, after notice and opportunity for comment, approve a plan for those futures commission merchants, retail foreign exchange dealers, or introducing brokers that are not the subject of an approved plan (under paragraph (h) of this section), delegating to a designated self-regulatory organization the responsibilities described in paragraph (d) of this section.

[78 FR 68638, Nov. 14, 2013, as amended at 83 FR 7995, Feb. 23, 2018; 84 FR 12892, Apr. 3, 2019]