An alternative trading system is a trading venue that matches buyers and sellers outside a traditional exchange. It operates under a regulated market structure, with rules for participant access, order handling, and trade reporting, and is commonly used for securities trading where exchange listing is not required.
How an alternative trading system works
An alternative trading system sits between buyers and sellers outside a traditional exchange, but it is still a regulated venue. Its core function is orderly matching, so the important security and governance question is not whether it trades, but how reliably it enforces participant rules, order integrity, and reporting obligations.
Compared with a public exchange, the market structure can be more segmented, with different access models, routing arrangements, and transparency expectations. That makes the operating model important for surveillance, reconciliation, and post-trade controls, because a trading venue can be compliant in design yet still create oversight gaps if its participant permissions or reporting workflows are inconsistent.
Why alternative trading systems matter in market structure
Alternative trading systems exist because not all securities trading needs to occur on a traditional exchange. They can support institutional order flow, specialized execution methods, and liquidity pools that sit alongside exchange markets rather than replacing them.
That placement matters operationally. When execution moves outside the main exchange tape, organisations must understand where orders are matched, how participant access is approved, and how trade data is captured for compliance and supervision. If those mechanics are weak, the venue can become harder to monitor even when the trading itself is lawful.
In practice, the term describes a venue type, not a single technology stack. Some systems are highly automated, while others are more relationship-driven in how participants connect and submit orders. The shared point is that they all introduce a governed market venue with its own access and reporting rules.
Controls and oversight expectations
An alternative trading system needs controls that preserve fairness, auditability, and reliable execution. Participant onboarding, entitlement management, order validation, trade reporting, and surveillance are not optional extras, they are part of the venue’s operating integrity.
For practitioners, the key issue is whether controls match the venue’s actual matching logic. If participant permissions, routing rules, or exception handling are poorly documented, a firm can misclassify orders, miss reporting deadlines, or fail to explain how a trade was executed. Those failures are often governance failures before they are technical ones.
Independent review is also important because ATS activity may be less visible than exchange activity. Firms that use or operate such venues should be able to trace how an order entered the system, what logic matched it, and what records were retained afterward.
Risk and threat considerations
Alternative trading systems concentrate market, operational, and surveillance risk in a venue that may be less visible than a traditional exchange. Weak access controls, inaccurate reporting, or poor recordkeeping can create compliance exposure, while manipulation or misuse of venue rules can distort price discovery and execution quality.
Failure mechanism: If order handling, participant permissions, or reporting controls break down, the venue can process trades that are difficult to reconcile, supervise, or evidence later. That creates a control gap that may persist until an audit, investigation, or exception review exposes it.
Impact: The result can include trade disputes, regulatory findings, impaired surveillance, and diminished confidence in execution quality. In serious cases, the venue’s records may not fully support reconstruction of what happened and when.
Standards & Framework Alignment
This section maps relevant standards and security frameworks to the operational risks and controls described in this guidance.
NIST CSF 2.0 and NIST SP 800-53 Rev 5 set the technical controls, while ISO/IEC 27001:2022 defines the regulatory obligations.
| Framework | Control / Reference | Relevance |
|---|---|---|
| NIST CSF 2.0 | GV.OC-01 — Organizational Context | ATS operation depends on governed market context and participant rules. |
| Recommendation — Define the venue’s governance context and map ATS oversight responsibilities to it. | ||
| NIST SP 800-53 Rev 5 | AC-3 — Access Enforcement | ATS participant access and order permissions require enforced authorization rules. |
| AU-2 — Event Logging | ATS matching and reporting depend on auditable records of trading activity. | |
| Recommendation — Enforce venue access rules so only approved participants can submit or route orders. Log order, matching, and reporting events so trades can be reconstructed and reviewed. | ||
| ISO/IEC 27001:2022 | A.5.15 — Access control | ATS controls rely on defined access restrictions for participants and operators. |
| A.8.15 — Logging | ATS oversight requires retained logs for trading, exceptions, and reporting. | |
| Recommendation — Apply access-control rules that match the venue’s participant and operator roles. Retain logs that support supervision, reconciliation, and post-trade review. | ||
Practitioner guidance
Why practitioners should care: The main operational judgement is whether the venue’s access and reporting controls are strong enough to support the trading model it actually runs. An ATS should be assessed as a governed market venue, not just as another routing endpoint.
What to watch for: Review whether participant access, order validation, exception handling, and trade reporting are owned, tested, and periodically reconciled against the venue’s documented rules. If those processes drift, the compliance and surveillance burden increases quickly.
Practitioner takeaway: The safest way to treat an alternative trading system is as a control-sensitive market venue whose integrity depends on disciplined permissions, transparent matching logic, and complete records.
Related resources from NHI Mgmt Group
Deepen Your Knowledge
Free weekly newsletter
Subscribe to the NHI & AI Identity Journal
The latest on NHI and Agentic AI security – articles, research, breaches, news and events every week.
Bonus 33% off our NHI Course when you subscribe.
Reviewed and updated by the NHIMG editorial team on October 29, 2026.
NHI Mgmt Group — the #1 independent authority on Non-Human Identity, IAM, and Agentic AI security. nhimg.org