Broker's Kill Switch Fails on a Volatile Day
Meridian Securities is a trading member on a recognised stock exchange in GIFT City, serving 1,200 non-resident clients. On a volatile day, a software update disables the price-band and order-throttle checks for 22 minutes. About 300 equity derivative orders enter the matching engine; 85 execute at prices far from the prevailing market. Clients complain, and one alleges that a connected person traded on non-public information about a listed Indian company. The exchange demands a preliminary report within 24 hours. The CTO wants to restore the trading server from a backup taken 36 hours earlier, which would overwrite audit logs and the order trail. The compliance officer wants to preserve logs and notify IFSCA immediately. The CEO wants to compensate only clients who threaten legal action and to keep the incident confidential.
1. What immediate steps should Meridian take? Prioritise preserving evidence, client protection and regulatory reporting.
Read the worked answer
Preserve first. Do not restore the 36-hour-old backup; it would overwrite the order trail and audit logs that the exchange and IFSCA will require. Isolate the affected servers, stop the affected trading channel, and invoke the business continuity plan on clean infrastructure. Notify the exchange and IFSCA within the prescribed timeline; the 24-hour preliminary report should state facts, not conclusions. Identify all 85 erroneous trades, apply the exchange's error-trade or clearly erroneous transaction policy, and reconcile client funds. Segregate client money, communicate with clients fairly, and keep a decision log. The CTO's restore plan should be allowed only after forensic copies are taken and the regulator agrees.
2. How should the firm handle the insider-trading allegation?
Read the worked answer
Treat the insider-trading allegation separately and seriously. Preserve emails, chat, access logs and dealing records for the client and any connected person. Do not tip off the suspect. Check restricted-list and wall-crossing records. Report to the exchange and IFSCA as required and consider a suspicious transaction report to the FIU. The firm's investigation should be independent and documented; it must not be used to bury the trading malfunction. If a connected person traded ahead of the client order, consider whether the firm's own controls failed and whether the client should be restricted pending inquiry.
3. Critique the CEO's compensation and confidentiality plan.
Read the worked answer
Selective compensation is unfair and risky. The firm should apply a documented compensation policy to all affected clients, not only those who threaten legal action. Confidentiality cannot override mandatory reporting to the exchange and IFSCA or client disclosure. The CEO's plan creates conduct, legal and reputational risk. The board should approve a remediation and disclosure plan, including root-cause analysis, system testing, client communication and a timetable for compensating verified losses. Any compensation should be without admission of liability and should be recorded consistently.