Policies and procedures that are to be provided as part of an application for registration as a securitisation repository shall contain the following:
evidence that the board approves the policies and that senior management approves the procedures and is responsible for the implementation and maintenance of those policies and procedures;
a description of how those policies and procedures are communicated within the applicant’s organisation, how compliance with those policies and procedures is ensured and monitored on a day-to-day basis, and who is responsible for compliance with those policies and procedures;
any records indicating that staff members and staff members who are operating under any outsourcing arrangement are aware of those policies and procedures;
a description of the measures to be taken in the event of a breach of those policies and procedures;
a description of the procedure for reporting to ESMA any material breach of the policies or procedures which may result in a breach of the conditions for registration;
a description of the arrangements for notifying ESMA promptly of any planned material changes to the applicant’s information technology systems, prior to their implementation.