17 CFR § 38.1050 - Core Principle 20.

Each designated contract market shall:

(a) Establish and maintain a program of risk analysis and oversight to identify and minimize sources of operational risk, through the development of appropriate controls and procedures, and the development of automated systems, that are reliable, secure, and have adequate scalable capacity;

(b) Establish and maintain emergency procedures, backup facilities, and a plan for disaster recovery that allow for the timely recovery and resumption of operations and the fulfillment of the responsibilities and obligations of the board of trade; and

(c) Periodically conduct tests to verify that backup resources are sufficient to ensure continued order processing and trade matching, transmission of matched orders to a designated clearing organization for clearing, price reporting, market surveillance, and maintenance of a comprehensive and accurate audit trail.