Real-time market monitoring
(5) Real-time market monitoring. A security-based swap execution facility shall conduct real-time market monitoring of all trading activity on its system(s) or platform(s) to identify any market or system anomalies. A security-based swap execution facility shall have the authority to adjust trade prices or cancel trades when necessary to mitigate market disrupting events caused by malfunctions in its system(s) or platform(s) or errors in orders submitted by members. Any trade price adjustments or trade cancellations shall be transparent to the market and subject to standards that are clear, fair, and publicly available. (6) Investigations and investigation reports(i) Procedures. A security-based swap execution facility shall establish and maintain procedures that require its compliance staff to conduct investigations of possible rule violations. An investigation shall be commenced upon the receipt of a request from Commission staff or upon the discovery or receipt of information by the security-based swap execution facility that indicates a reasonable basis for finding that a violation may have occurred or will occur. (ii) Timeliness. Each compliance staff investigation shall be completed in a timely manner. Absent mitigating factors, a timely manner is no later than 12 months after the date that an investigation is opened. Mitigating factors that may reasonably justify an investigation taking longer than 12 months to complete include the complexity of the investigation, the number of firms or individuals involved as potential wrongdoers, the number of potential violations to be investigated, and the volume of documents and data to be examined and analyzed by compliance staff. (iii) Investigation reports when a reasonable basis exists for finding a violation. Compliance staff shall submit a written investigation report for disciplinary action in every instance in which compliance staff determines from surveillance or from an investigation that a reasonable basis exists for finding a rule violation. The investigation report shall include the reason the investigation was initiated; a summary of the complaint, if any; the relevant facts; compliance staff's analysis and conclusions; and a recommendation as to whether disciplinary action should be pursued. (iv) Investigation reports when no reasonable basis exists for finding a violation. If after conducting an investigation, compliance staff determines that no reasonable basis exists for finding a rule violation, it shall prepare a written report including the reason the investigation was initiated; a summary of the complaint, if any; the relevant facts; and compliance staff's analysis and conclusions. (v) Warning letters. The rules of a security-based swap execution facility may authorize its compliance staff to issue a warning letter to a person or entity under investigation or to recommend that a disciplinary panel take such an action. No more than one warning letter may be issued to the same person or entity found to have committed the same rule violation within a rolling 12-month period.