A backup server is only one part of a broker’s response to a major disruption. FINRA Rule 4370 requires member firms to maintain a written business continuity plan reasonably designed to meet existing customer obligations. The rule connects technology recovery with communications, counterparties and customer access, rather than reducing resilience to one spare machine. FINRA Rule 4370: Business Continuity Plans and Emergency Contact Information
Follow the evidence
Trace how the event could reach markets, then inspect a competing explanation.
Compare explanations
Switch lenses to see what each account explains—and what remains uncertain.
WFN analysis: consider a hypothetical firm that restores its trading interface while its payment connection remains unavailable. The website is online, but the customer’s ability to move funds may still be affected. Measuring only server uptime would miss that outcome. A useful continuity exercise therefore follows the customer process through the systems and counterparties it actually needs. Common dependencies deserve particular attention. Two apparent backup routes may rely on the same identity service, telecommunications link or external provider. Redundancy is meaningful only if the alternative remains usable in the relevant disruption. This is an analytical question for testing; it does not assert that any particular broker has such a weakness. Communication is another operating function. A restored internal system does little for a customer who cannot obtain accurate instructions or verify the status of an order. A plan should connect its public messages with the known service state, so customers are not told that business is normal while a critical activity remains unavailable.
WFN analysis: consider a hypothetical firm that restores its trading interface while its payment connection remains unavailable. The website is online, but the customer’s ability to move funds may still be affected. Measuring only server uptime would miss that outcome. A useful continuity exercise therefore follows the customer process through the systems and counterparties it actually needs. Common dependencies deserve particular attention. Two apparent backup routes may rely on the same identity service, telecommunications link or external provider. Redundancy is meaningful only if the alternative remains usable in the relevant disruption. This is an analytical question for testing; it does not assert that any particular broker has such a weakness. Communication is another operating function. A restored internal system does little for a customer who cannot obtain accurate instructions or verify the status of an order. A plan should connect its public messages with the known service state, so customers are not told that business is normal while a critical activity remains unavailable.
A practical review can choose a disruption, identify which obligations are affected and follow the recovery steps through to a verifiable outcome. Record the dependencies that failed, the fallback used and the unresolved tasks. An annual review becomes more useful when those findings lead to an updated plan, rather than merely renewing the date on an unchanged document. Customers can read the firm’s continuity disclosure for the scope of events considered and the proposed response. It should not be mistaken for an unconditional promise of uninterrupted service or a universal recovery time. This article describes FINRA’s member-firm framework and a way to assess its implementation; it does not extend that rule automatically to all brokers in other jurisdictions.
The rule requires a maintained plan
Member firms must update their plans when material changes occur and review them annually. Required areas, to the extent applicable, include data backup, mission-critical systems, communications and the treatment of critical relationships. If a firm relies on another entity for a covered function or critical system, the plan must address that relationship. FINRA Rule 4370: Business Continuity Plans and Emergency Contact Information
The rule also addresses prompt customer access to funds and securities if a firm determines it cannot continue its business. A senior manager who is a registered principal must approve the plan and conduct the annual review. Customer disclosure is required at account opening, on a firm’s website if it has one, and by mail on request. FINRA Rule 4370: Business Continuity Plans and Emergency Contact Information
A technology recovery can leave a business dependency unresolved
WFN analysis: consider a hypothetical firm that restores its trading interface while its payment connection remains unavailable. The website is online, but the customer’s ability to move funds may still be affected. Measuring only server uptime would miss that outcome. A useful continuity exercise therefore follows the customer process through the systems and counterparties it actually needs.
Common dependencies deserve particular attention. Two apparent backup routes may rely on the same identity service, telecommunications link or external provider. Redundancy is meaningful only if the alternative remains usable in the relevant disruption. This is an analytical question for testing; it does not assert that any particular broker has such a weakness.
Communication is another operating function. A restored internal system does little for a customer who cannot obtain accurate instructions or verify the status of an order. A plan should connect its public messages with the known service state, so customers are not told that business is normal while a critical activity remains unavailable.
Judge the plan through a realistic recovery exercise
A practical review can choose a disruption, identify which obligations are affected and follow the recovery steps through to a verifiable outcome. Record the dependencies that failed, the fallback used and the unresolved tasks. An annual review becomes more useful when those findings lead to an updated plan, rather than merely renewing the date on an unchanged document.
Customers can read the firm’s continuity disclosure for the scope of events considered and the proposed response. It should not be mistaken for an unconditional promise of uninterrupted service or a universal recovery time. This article describes FINRA’s member-firm framework and a way to assess its implementation; it does not extend that rule automatically to all brokers in other jurisdictions.