Standard Operating Procedure (SOP) for handling stock exchange outage

SEBI (Securities and Exchange Board of India) mandates that all recognized stock exchanges maintain a documented SOP for handling system failures or outages. The requirement is stipulated in the SEBI (Stock Exchanges) Regulations, 2015, under the clause on “Business Continuity and Disaster Recovery”.

The SOP must be approved by the exchange’s Board of Directors and periodically reviewed at least once a year. It should also be shared with market participants, including brokers, clearing members, and depositories, to ensure coordinated action.

For the NISM exam, remember that the regulator’s focus is on three pillars: prevention, prompt detection, and effective recovery. Questions often test whether you can map a procedural step to the correct regulatory objective.

• Regulatory source – SEBI (Stock Exchanges) Regulations, 2015.
• Key objective – protect investor interests and maintain market integrity.

The SOP is divided into five core sections: (1) Detection and Initial Assessment, (2) Immediate Containment, (3) Stakeholder Notification, (4) Restoration and Validation, and (5) Post‑Outage Review. Each section outlines specific actions, responsible parties, and time limits.

Detection must occur within 5 minutes of any abnormal latency or system halt, as per exchange guidelines. Immediate containment involves isolating the affected subsystem to prevent a cascade effect on other market functions.

Stakeholder notification includes internal alerts to the exchange’s Operations Desk, external alerts to SEBI, brokers, and the public via the exchange’s website and media releases. The restoration phase requires a step‑by‑step verification of order flow, price feeds, and clearing‑house connectivity before trading resumes.

• Time‑bound actions – each step has a predefined maximum duration (e.g., 15 minutes for initial notification).
• Documentation – every action must be logged with timestamps for audit purposes.

1. Detection & Initial Assessment: Monitoring systems raise an alarm. The Operations Desk records the exact time, nature of the fault, and affected modules. A preliminary impact analysis determines whether the issue is localized or systemic.

2. Immediate Containment: If the fault is localized, the affected server is taken offline while backup routes are activated. For systemic failures, the exchange may suspend trading altogether, invoking the “circuit‑breaker” protocol.

3. Stakeholder Notification: Within 15 minutes, the Operations Desk notifies SEBI, the exchange’s Board, clearing members, and brokers via pre‑approved templates. Simultaneously, a public notice is posted on the exchange’s website and sent to media partners.

4. Restoration & Validation: Technical teams work to restore services. Once systems are back online, a validation checklist is executed – order matching, price dissemination, and settlement interfaces are tested with dummy trades. Only after successful validation is trading reopened.

5. Post‑Outage Review: Within 48 hours, a detailed incident report is prepared, outlining root cause, actions taken, and lessons learned. The report is submitted to SEBI and used to update the SOP.

• Each step must be signed off by the responsible officer.
• All timestamps are critical for regulatory audit.

The SOP assigns clear responsibilities to avoid confusion during a crisis. The Exchange Operations Manager leads the technical response, while the Compliance Officer handles regulatory notifications. Brokers must halt order entry on their platforms and inform their clients promptly.

Clearing members are required to verify that no unsettled positions are left in limbo, and the depository must ensure that securities are not erroneously transferred during the outage. SEBI’s Monitoring Cell acts as the external overseer, receiving real‑time updates.

Understanding these roles helps you answer matching‑type questions where you need to link a responsibility to the correct stakeholder.

Effective communication is the backbone of the SOP. The exchange maintains three channels: (i) an internal incident‑management portal for real‑time updates, (ii) a pre‑approved email/SMS template for external stakeholders, and (iii) a live status page on the exchange’s website.

All messages must include the outage start time, affected services, expected resolution window, and a contact number for queries. The tone should be factual and reassuring to prevent panic among investors.

During the exam, you may be asked to identify the correct order of communication or the mandatory content of a public notice. Remember the five‑point checklist: Time, Impact, Action, Estimate, Contact.

The SOP must be tested quarterly through simulated outage drills. These drills involve all stakeholders and verify that communication channels, escalation paths, and technical backups function as intended.

After each drill, a gap analysis is performed. Any identified weakness—such as delayed notification or insufficient backup capacity—is addressed by updating the SOP and, if necessary, upgrading infrastructure.

SEBI conducts periodic inspections and may request the latest drill reports. Failure to demonstrate a robust testing regime can lead to regulatory penalties, which is a frequent focus of exam questions.