Operational Resilience – CTPs: What should you be doing about the proposed UK/EU Critical Third Parties Regimes?

Regulators around the world are focused on the operational resilience of financial institutions, financial market infrastructures and the financial system as a whole. One area of significant risk to the financial system are the significant dependencies of financial institutions on Critical Third Parties (CTPs), particularly in relation to the cloud and other Information and Communication Technology (ICT) services. Both the UK and the EU have advanced proposals for new regulatory frameworks in this area. Read more

Global FSR Outlook 2023 – Braving the maelstrom

Our Global FSR Outlook 2023 has been published.  In the Outlook, our Financial Services Regulatory (FSR) team surveys the regulatory landscape for 2023 and considers the challenges confronting firms and regulators. Read more

A new regime for critical third party providers to UK financial services firms is on the horizon

On 21 July 2022 the Bank of England, the PRA and the FCA published Discussion Paper 22/3 - Operational resilience: Critical third parties to the UK financial sector (DP22/3). DP22/3 sets out how the financial services regulators could use new powers proposed under the Financial Services and Markets Bill (FSM Bill) to assess and strengthen the resilience of material services provided by critical third parties to the UK financial services sector. Publication of DP22/3 marks an early step on the road to the introduction of a new designation regime for third party providers in respect of the material services they provide to the financial services sector. Read more

Operational Resilience: What’s next?

We have updated our Operational Resilience timeline to include key recent developments from the UK, EU, Hong Kong, Singapore, Australia and international standard setting bodies.  Operational resilience is the ability to 'prevent, adapt, respond to, recover and learn from operational disruptions'. Read more

Moving on up… PRA raises the Op Res bar to HoldCo level

When the UK authorities published their final policy on operational resilience at the end of March 2021, it was broadly acknowledged – including by the PRA itself – that the operational resilience landscape would continue to develop. The latest act on the UK stage is the PRA's proposals to apply the group provisions in the Operational Resilience Part of the PRA Rulebook relevant to Capital Requirements Regulation (CRR) firms to holding companies. Read more