c3-5 Risk management controls for brokers or dealers with market access.
17 C.F.R. § 240.15c3-5
in effectEffective: 2024-07-01(a) For the purpose of this section:
(1) The term market access shall mean:
(i) Access to trading in securities on an exchange or alternative trading system as a result of being a member or subscriber of the exchange or alternative trading system, respectively; or
(ii) Access to trading in securities on an alternative trading system provided by a broker-dealer operator of an alternative trading system to a non-broker-dealer.
(2) The term regulatory requirements shall mean all federal securities laws, rules and regulations, and rules of self-regulatory organizations, that are applicable in connection with market access.
(b) A broker or dealer with market access, or that provides a customer or any other person with access to an exchange or alternative trading system through use of its market participant identifier or otherwise, shall establish, document, and maintain a system of risk management controls and supervisory procedures reasonably designed to manage the financial, regulatory, and other risks of this business activity. Such broker or dealer shall preserve a copy of its supervisory procedures and a written description of its risk management controls as part of its books and records in a manner consistent with § 240.17a-4(e)(7). A broker-dealer that routes orders on behalf of an exchange or alternative trading system for the purpose of accessing other trading centers with protected quotations in compliance with Rule 611 of Regulation NMS (§ 242.611) for NMS stocks, or in compliance with a national market system plan for listed options, shall not be required to comply with this rule with regard to such routing services, except with regard to paragraph (c)(1)(ii) of this section.
(c) The risk management controls and supervisory procedures required by paragraph (b) of this section shall include the following elements:
(1) Financial risk management controls and supervisory procedures. The risk management controls and supervisory procedures shall be reasonably designed to systematically limit the financial exposure of the broker or dealer that could arise as a result of market access, including being reasonably designed to:
(i) Prevent the entry of orders that exceed appropriate pre-set credit or capital thresholds in the aggregate for each customer and the broker or dealer and, where appropriate, more finely-tuned by sector, security, or otherwise by rejecting orders if such orders would exceed the applicable credit or capital thresholds; and
(ii) Prevent the entry of erroneous orders, by rejecting orders that exceed appropriate price or size parameters, on an order-by-order basis or over a short period of time, or that indicate duplicative orders.
(2) Regulatory risk management controls and supervisory procedures. The risk management controls and supervisory procedures shall be reasonably designed to ensure compliance with all regulatory requirements, including being reasonably designed to:
(i) Prevent the entry of orders unless there has been compliance with all regulatory requirements that must be satisfied on a pre-order entry basis;
(ii) Prevent the entry of orders for securities for a broker or dealer, customer, or other person if such person is restricted from trading those securities;
(iii) Restrict access to trading systems and technology that provide market access to persons and accounts pre-approved and authorized by the broker or dealer; and
(iv) Assure that appropriate surveillance personnel receive immediate post-trade execution reports that result from market access.
(d) The financial and regulatory risk management controls and supervisory procedures described in paragraph (c) of this section shall be under the direct and exclusive control of the broker or dealer that is subject to paragraph (b) of this section.
(1) Notwithstanding the foregoing, a broker or dealer that is subject to paragraph (b) of this section may reasonably allocate, by written contract, after a thorough due diligence review, control over specific regulatory risk management controls and supervisory procedures described in paragraph (c)(2) of this section to a customer that is a registered broker or dealer, provided that such broker or dealer subject to paragraph (b) of this section has a reasonable basis for determining that such customer, based on its position in the transaction and relationship with an ultimate customer, has better access than the broker or dealer to that ultimate customer and its trading information such that it can more effectively implement the specified controls or procedures.
(2) Any allocation of control pursuant to paragraph (d)(1) of this section shall not relieve a broker or dealer that is subject to paragraph (b) of this section from any obligation under this section, including the overall responsibility to establish, document, and maintain a system of risk management controls and supervisory procedures reasonably designed to manage the financial, regulatory, and other risks of market access.
(e) A broker or dealer that is subject to paragraph (b) of this section shall establish, document, and maintain a system for regularly reviewing the effectiveness of the risk management controls and supervisory procedures required by paragraphs (b) and (c) of this section and for promptly addressing any issues.
(1) Among other things, the broker or dealer shall review, no less frequently than annually, the business activity of the broker or dealer in connection with market access to assure the overall effectiveness of such risk management controls and supervisory procedures. Such review shall be conducted in accordance with written procedures and shall be documented. The broker or dealer shall preserve a copy of such written procedures, and documentation of each such review, as part of its books and records in a manner consistent with § 240.17a-4(e)(7) and § 240.17a-4(b), respectively.
(2) The Chief Executive Officer (or equivalent officer) of the broker or dealer shall, on an annual basis, certify that such risk management controls and supervisory procedures comply with paragraphs (b) and (c) of this section, and that the broker or dealer conducted such review, and such certifications shall be preserved by the broker or dealer as part of its books and records in a manner consistent with § 240.17a-4(b).
(f) The Commission, by order, may exempt from the provisions of this section, either unconditionally or on specified terms and conditions, any broker or dealer, if the Commission determines that such exemption is necessary or appropriate in the public interest consistent with the protection of investors.
Source: eCFRURL: https://www.ecfr.gov/api/versioner/v1/full/2024-07-01/title-17.xmlFetched: 7/26/2026