Skip to Highlights
Highlights

In February 2003 reports, GAO identified actions needed to better prepare critical financial market participants for wide-scale disasters, such as terrorist attacks. To determine progress made since then, GAO assessed (1) actions that critical securities market organizations took to improve their ability to prevent and recover from disruptions, (2) actions that financial market and telecommunications industry participants took to improve telecommunications resiliency, (3) financial regulators' efforts to ensure the resiliency of the financial markets; and (4) SEC's efforts to improve its program for overseeing operations risks at certain market participants.

Skip to Recommendations

Recommendations

Recommendations for Executive Action

Agency Affected Recommendation Status
United States Securities and Exchange Commission To provide greater assurance that the critical trading that is conducted in U.S. financial markets can resume, in as timely a manner as appropriate, after disruptions, the Chairman, SEC, should fully analyze the readiness of the securities markets to recover from major disruptions and work with industry and other federal agencies, as appropriate, to determine reasonable actions that would increase the likelihood that trading in the markets could resume when appropriate.
Closed - Implemented
We have recommended in several past reports (GAO-03-251, GAO-03-414, and GAO-04-984) that SEC fully analyze the readiness of the securities markets to recover from major disruptions and continue trading activities. In conducting work for the most recent follow-on report to those engagements, SEC staff told us that they have considered how a wide range of disaster scenarios would affect the securities markets in consultation with the other federal agencies and local emergency management officials in New York and Chicago. Furthermore, they have conducted an analysis of the major firms to ascertain their willingness and ability to continue to trade in the event of a wide-scale disruption. This analysis was done in conjunction with compliance reviews related to recently issued market-wide business continuity guidance. SEC staff told us that the examined firms all expressed a commitment to continue to operate and have allocated substantial resources to enhance their resilience sufficiently to permit them to trade. Lastly, SEC has developed an expanded examination module to obtain more detailed information on firms' business continuity capabilities related to trading activities. SEC staff have made this part of the existing examination guidance for the SEC examiners and told us that they expect to use this expanded guidance in the applicable broker-dealer examinations beginning with the 2007 cycle. Based on the work discussed above, SEC staff believe that market participants have increased their resilience since September 11 and that sufficient numbers of firms and staff likely would be able to operate from various locations to allow U.S. markets to resume trading when appropriate.
United States Securities and Exchange Commission In addition, to improve the effectiveness of SEC's ARP program, which oversees preparedness of securities trading and clearing organizations for future disasters, the Chairman, SEC, should establish a definite time frame for the submission of a rule requiring exchanges and clearing organizations to engage in activities consistent with the operational practices and other tenets of the ARP program.
Closed - Implemented
Since we made this recommendation, staff from SEC's Market Regulation Division provided us with a timeline by which they took and planned to take various actions to present a rule for Commission approval that will make adherence to the ARP program mandatory for affected organizations, as we previously recommended. Events that have occurred on this timeline include the original drafting of the rule, revision of the draft rule to make it more of a prudential-style rule, and and its submission to SEC's Office of General Counsel in October 2007. Since then, the staff have responded with changes per OGC comments, including submitting a revised version of the draft rule to their OGC again in June 2008. As of July 2008, the division's staff have advised us that they will encourage their counsel's office to complete its review and submit the rule for commission approval.
United States Securities and Exchange Commission In addition, to improve the effectiveness of SEC's ARP program, which oversees preparedness of securities trading and clearing organizations for future disasters, the Chairman, SEC, should assess the adequacy of ARP staffing in terms of positions and technical skill levels, including information security expertise, given its mission and workload.
Closed - Implemented
The SEC Automation Review Program, which oversees information technology and operational issues at exchanges and markets, has hired two additional staff with MBAs with concentrations in Management Information Systems and work experience in IT and is in the process of hiring one additional MBA with a concentration in Management Information Systems.
United States Securities and Exchange Commission In addition, to improve the effectiveness of SEC's ARP program, which oversees preparedness of securities trading and clearing organizations for future disasters, the Chairman, SEC, should continue to assess the organizational alignment of the ARP program within SEC.
Closed - Implemented
SEC staff considered the alignment of the ARP program and recently reorganized it to combine it with staff that perform market surveillance activities. In response to our recommendation, SEC said that as part of its strategic planning process, it will continue to assess the proper placement of ARP within the organization.

Full Report