http://www.legislation.gov.uk/eur/2012/449/annex/XCommission Delegated Regulation (EU) No 449/2012 of 21 March 2012 supplementing Regulation (EC) No 1060/2009 of the European Parliament and of the Council with regard to regulatory technical standards on information for registration and certification of credit rating agencies (Text with EEA relevance)Commission Delegated Regulation (EU) No 449/2012Commission Delegated Regulation (EU) No 449/2012 of 21 March 2012 supplementing Regulation (EC) No 1060/2009 of the European Parliament and of the Council with regard to regulatory technical standards on information for registration and certification of credit rating agencies (Text with EEA relevance)King's Printer of Acts of Parliamenthttps://webarchive.nationalarchives.gov.uk/eu-exit/https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32012R0449texttext/xmlen2024-01-02Expert Participation2023-07-11 ANNEX X RECORD KEEPING, BUSINESS CONTINUITY PLANNING AND INFORMATION SYSTEMS <Emphasis>(Article 11)</Emphasis> <Strong>Record keeping</Strong> 1. Information regarding the policies and procedures regarding the record keeping obligations set out in Article 8(4) and point 7 of Section A and points 7, 8 and 9 of Section B of Annex I to Regulation (EC) No 1060/2009:

an indication on which records are kept and for how long; and an identification of the recipients of confidential information for each rating issued.

<Strong>Continuity and regularity of the activities</Strong> 2. Information regarding the continuity and regularity in the performance of the credit rating activities as set out in point 8 of Section A of Annex I to Regulation (EC) No 1060/2009, including:

description of the procedures to ensure continuity and regularity in the performance of the credit rating activities, including information on their applicability to service providers to which activities have been outsourced; the types of business continuity planning tests expected to be conducted; and the frequency of testing.

<Strong>Information processing systems</Strong> 3. Information regarding the information processing systems as set out in point 8 of Section A of Annex I to Regulation (EC) No 1060/2009, including:

the identity of the senior manager responsible for the information processing systems; a description of the information processing systems including any back-up systems; and a description of effective control and safeguard arrangements for the information processing systems in place as well as the mechanisms to monitor their effectiveness, including details of the procedures in place to ensure effective separation between the information processing systems used to report fees from those accessible to rating analysts and used to enter ratings and information about the rated entities or rated transactions.