The Digital Investment Manager must ensure that its systems and controls are adequate and appropriate for the scale, nature and complexity of its business.14 This applies in particular to systems and controls concerning:
a. the transmission and storage of information;
b. the assessment, mitigation and management of risks relating to the provision of digital investment management services, including data security;
c. the effecting and monitoring of transactions by the Digital Investment Manager;
d. the technical operations of the Digital Investment Manager, including contingency arrangements for disruption to its facilities;
e. the operation of its functions relating to the safeguards and protections to investors; and
f. outsourcing.

14 Refer to GEN 2.2.3 and chapter 3.3, PRU 6.6 and 6.7, and other requirements in the Rulebook as applicable.