FCA and PRA Operational Resilience Regime
The UK operational resilience regime explained: important business services, impact tolerances, mapping, scenario testing and self-assessment under FCA and PRA rules.
Line 17: FCA and PRA operational resilience
The UK regime, labelled as a separate regime throughout: FCA and PRA operational resilience, its own policy statements, dates and expectations.
The line guide
Working guides on this line
FCA and PRA Impact Tolerances in the UK
Impact tolerances under the UK regime: what intolerable harm means for a named service, how tolerances differ from targets, and why they must reflect the user experience.
FCA and PRA Important Business Services in the UK
How UK firms identify important business services under FCA and PRA rules: starting from customer harm, naming services clearly, and avoiding lists that hide real journeys.
FCA and PRA Mapping in the UK
Mapping under the UK regime: tracing every person, process, system, facility and third party a named service depends on, including single points of failure.
FCA and PRA Scenario Testing in the UK
Scenario testing under the UK regime: designing severe but plausible disruptions, rehearsing recovery against a tolerance, and learning from where the service would fail.
FCA and PRA Self-Assessment in the UK
Self-assessment under the UK regime: the board level account of services, tolerances, maps, testing and gaps, and why honest gaps strengthen rather than weaken it.
UK Operational Resilience for Dual-Regulated Firms
Dual-regulated firms under the UK regime: satisfying both FCA and PRA expectations through one coherent service account, without merging regimes or duplicating work blindly.
UK Regime and DORA Comparison
UK operational resilience vs DORA, kept apart: different sources, different units of analysis, different documents, and why copying an answer across regimes fails both.
UK Regime and Governance Expectations
Governance under the UK regime: board ownership of services and tolerances, senior challenge, clear accountability, and self-assessment that a board can actually defend.
UK Regime and Incident Reporting
Incident reporting alongside the UK regime: escalation, user communication, regulator notification under applicable rules, and turning incidents into map and tolerance lessons.
UK Regime and Testing Expectations
Testing expectations under the UK regime: what good scenario, walkthrough and live testing look like, how often testing should recur, and what evidence should remain.
UK Regime and Third-Party Risk
Third-party risk under the UK regime: how supplier failure becomes service failure, and how mapping, testing and oversight keep that link visible for firms.
UK Regime Enforcement and Supervision
Supervision under the UK regime: how FCA and PRA engagement, challenge and follow-up test whether a service account matches testing and incident evidence.
UK Regime for Small Firms
The UK regime for small firms: the same service outcome expectation, applied proportionately, with lean governance, supplier dependence and concentration risk in view.
UK Regime Lessons from Implementation
Lessons from UK implementation: where firms struggled with service lists, tolerances, maps and testing, and what stronger implementations did differently.
UK Regime Timeline and Deadlines
The UK operational resilience timetable: identification and tolerances first, then remaining within tolerance under severe but plausible scenarios, with ongoing self-assessment.