ARTE One — Enterprise Resilience & Business Continuity Framework

1. Enterprise Resilience Overview

Resilience is a foundational pillar of ARTE One's operating model and wealth platform architecture.

ARTE One maintains an Enterprise Resilience Framework designed to ensure the continuity, integrity, and reliability of its critical services in the event of severe but plausible operational disruptions.

The framework reflects ARTE One's commitment to protecting clients' interests, safeguarding data and assets, and maintaining trusted access to services across market, operational, technological, and external stress scenarios.

ARTE One's Enterprise Resilience Framework encompasses:

  • Operational Resilience
  • Business Continuity Management
  • Technology Resilience and Disaster Recovery
  • Crisis and Incident Management
  • Third-Party Risk and Oversight

2. Governance & Accountability

Enterprise Resilience at ARTE One is governed at senior management level and embedded within the platform's overall governance structure.

  • Oversight is provided by Executive Management and relevant governance committees.
  • A dedicated resilience function coordinates the framework across business, technology, and operational teams.
  • Business and operational leaders retain responsibility for maintaining continuity within their respective functions.
  • Resilience capabilities and controls are periodically reviewed and enhanced as part of ARTE One's governance processes.
  • Ultimate accountability for resilience remains with ARTE One's human management and decision-making bodies.

3. Business Continuity Management

ARTE One maintains Business Continuity Plans designed to support the continuity of its critical wealth platform services in the event of disruption.

These plans are informed by a structured Business Impact Analysis (BIA) process, which:

  • Identifies critical services and processes
  • Assesses financial and non-financial impacts of service disruption
  • Maps key internal and third-party dependencies
  • Informs recovery and continuity strategies

Business continuity strategies address:

  • Personnel availability and alternative working arrangements
  • Technology and data access
  • External service providers
  • Facilities and operational locations

Plans are reviewed periodically and updated to reflect changes in the operating model, service scope, and risk environment.

4. Operational Resilience

ARTE One applies a service-centric approach to operational resilience, focusing on the continuity of services that are essential to clients and platform integrity.

Key elements of this approach include:

  • Identification of Important Business Services whose disruption could cause material harm to clients or the platform
  • Definition of impact tolerance levels representing the maximum tolerable disruption
  • Mapping of critical resources required to deliver these services, including people, processes, technology, and information
  • Scenario analysis and stress testing against severe but plausible disruption events
  • Continuous improvement through lessons learned from testing and incidents

This approach supports ARTE One's ability to prevent, adapt to, respond to, recover from, and learn from operational disruptions.

5. Technology Resilience & Disaster Recovery

ARTE One operates a technology architecture designed to support resilience, availability, and data integrity.

Technology resilience measures include:

  • Distributed and redundant systems architecture
  • Secure data backup and recovery arrangements
  • Defined disaster recovery procedures for technology-related incidents
  • Regular testing of recovery capabilities

Disaster recovery capabilities are designed to support service continuity regardless of the nature or location of a disruption, including technology failures, cyber incidents, or infrastructure outages.

6. Crisis & Incident Management

ARTE One maintains formal incident and crisis management processes to ensure a coordinated and controlled response to disruptive events.

Key features include:

  • Ongoing monitoring of operational and technology-related incidents
  • Defined escalation thresholds and decision-making protocols
  • Coordinated response structures to manage operational, reputational, regulatory, and client impacts
  • Structured internal and external communication processes during crisis events

The objective of crisis management is to protect clients, maintain service continuity, and preserve platform integrity under stress.

7. Third-Party Risk & Outsourcing Oversight

ARTE One recognises the importance of third-party resilience in delivering its services.

Accordingly:

  • Third-party service providers are subject to due diligence prior to onboarding
  • Operational resilience and continuity considerations form part of third-party assessments
  • Ongoing oversight is applied to service providers supporting critical services
  • Contractual arrangements address continuity, security, and risk management expectations where appropriate

8. Testing, Training & Awareness

ARTE One maintains a program of resilience testing and awareness to validate preparedness and strengthen operational readiness.

This includes:

  • Business continuity and crisis response exercises
  • Technology resilience and recovery testing
  • Periodic staff awareness and preparedness activities
  • Review and enhancement of plans following tests or real incidents

Testing outcomes are used to identify opportunities for improvement and reinforce resilience across the platform.

9. Regulatory & Industry Alignment

ARTE One's Enterprise Resilience Framework is designed to align with applicable regulatory expectations and industry best practices relating to operational resilience, business continuity, technology risk, and third-party oversight, as relevant to its activities and jurisdictions.

Where appropriate, ARTE One monitors emerging regulatory standards and adjusts its practices to ensure the framework remains robust, proportionate, and effective.

10. Disclosure Notice

This overview is provided for informational purposes only.

It does not disclose confidential operational, security, or recovery details and should not be interpreted as a guarantee of uninterrupted service.