Featured Product

    FCA Reviews Technology Change Management in Financial Services Sector

    February 05, 2021

    FCA published the findings from a review that looked at how financial firms manage technology change, the impact of change failures, and the practices utilized in the industry to help reduce the impact of incidents resulting from change management. While there is no single approach, process, or control that improves change success rates, the analysis found that stronger governance, day-to-day risk management, increased automation, and more robust testing and planning can contribute to successful change activity and less disruption.

    Based on the review, FCA found that firms with higher change success rates had the following common characteristics:

    • Firms with well-established governance arrangements have a higher change success rate. There was a positive correlation between the longevity of governance arrangements and higher change success rates in the sampled firms. The data showed that robust governance can help reduce the number and impact of operational incidents resulting from change.
    • Relying on high levels of legacy technology is linked to more failed and emergency changes. FCA found that firms with a lower proportion of legacy infrastructure and applications had a higher change success rate. Firms with a lower proportion of legacy technology also had a lower proportion of changes being deployed as emergencies and had a higher chance of those emergency changes being successfully deployed.
    • Firms that allocated a higher proportion of their technology budget to change activities experienced fewer change related incidents. Firms that had the lowest proportion of changes resulting in an incident dedicated between 50% and 75% of their information technology budget to these change activities.
    • Frequent releases and agile delivery can help firms to reduce the likelihood and impact of change related incidents. FCA found that firms that deployed smaller, more frequent releases had higher change success rates than those with longer release cycles. Firms that made effective use of agile delivery methodologies were also less likely to experience a change incident.
    • Effective risk management is an important component of effective change management capabilities. Firms that experienced less incidents due to failed changes mitigated the risk of technology change by leveraging a wide range of technical and business knowledge to ensure that potential impacts were well understood. 

    In addition, FCA identified the following areas that could lead to increased operational disruption when carrying out change activity:

    • Most firms do not have complete visibility of third-party changes. According to firms’ incident reporting, in 2019, over 20% of incidents at third-parties were caused by change. Workshop attendees suggested that third-party contracts could be better utilized to provide greater clarity on how changes are communicated and on the potential impact to the information technology estate of a client firm.
    • Firms’ change management processes are heavily reliant on manual review and actions. Repeatability and consistency throughout the lifecycle of a change and its deployment could help reduce the burden of assurance activity and could also allow for a higher degree of confidence when implementing technology change.
    • Legacy technology impacts firms’ ability to implement new technologies and innovative approaches. Firms that classified a higher proportion of their technology estate as legacy had lower adoption rates for DevOps, micro-architecture, and public cloud, which could affect the ability of these to benefit from innovative approaches.

     

    Related Links

    Keywords: Europe, UK, Banking, Securities, Technology Risk, Governance, Fintech, Change Management, Operational Risk, Third-Party Arrangements, Cloud Computing, Outsourcing Arrangements, FCA

    Related Articles
    News

    EU Amends CRD4 and CRD5 as Part of Capital Markets Recovery Package

    EU published Directive 2021/338, which amends the Markets in Financial Instruments Directive (MiFID) II and the Capital Requirements Directives (CRD 4 and 5) to facilitate recovery from the COVID-19 crisis.

    February 26, 2021 WebPage Regulatory News
    News

    EU Committee Recommends Systemic Risk Buffer of 4.5% in Norway

    The Standing Committee of the European Free Trade Association (EFTA) recommended that a systemic risk buffer level of 4.5% for domestic exposures can be considered appropriate for addressing the identified systemic risks to the stability of the financial system in Norway.

    February 25, 2021 WebPage Regulatory News
    News

    PRA Clarifies Approach to Onshoring of Credit Risk Rules for UK Banks

    In a recent statement, PRA clarified its approach to the application of certain EU regulatory technical standards and EBA guidelines on standardized and internal ratings-based approaches to credit risk, following the end of the Brexit transition.

    February 25, 2021 WebPage Regulatory News
    News

    FSB Sets Out Work Priorities for 2021

    In a recently published letter addressed to the G20 finance ministers and central bank governors, the FSB Chair Randal K. Quarles has set out the key FSB priorities for 2021.

    February 25, 2021 WebPage Regulatory News
    News

    EU Publishes Corrigendum to Revised Capital Requirements Regulation

    EU published, in the Official Journal of the European Union, a corrigendum to the revised Capital Requirements Regulation (CRR2 or Regulation 2019/876).

    February 25, 2021 WebPage Regulatory News
    News

    ESAs Issue Statement on Application of Sustainability Disclosures Rule

    ESAs published a joint supervisory statement on the effective and consistent application and on national supervision of the regulation on sustainability-related disclosures in the financial services sector (SFDR).

    February 25, 2021 WebPage Regulatory News
    News

    EC Consults on Crisis Management and Deposit Insurance Frameworks

    EC published a public consultation on the review of crisis management and deposit insurance frameworks in EU.

    February 25, 2021 WebPage Regulatory News
    News

    HKMA Enhances Loan Guarantee Scheme to Alleviate Pressure on SMEs

    HKMA announced that enhancements will be made to the Special 100% Loan Guarantee of the SME Financing Guarantee Scheme (SFGS) and the application period will be extended to December 31, 2021.

    February 24, 2021 WebPage Regulatory News
    News

    EBA Proposes Standards for Supervisory Cooperation Under IFD

    EBA launched consultations on the regulatory and implementing technical standards on cooperation and information exchange between competent authorities involved in prudential supervision of investment firms.

    February 24, 2021 WebPage Regulatory News
    News

    BoE Addresses Banks in Scope of First Resolvability Assessment

    BoE issued a letter to the CEOs of eight major UK banks that are in scope of the first Resolvability Assessment Framework (RAF) reporting and disclosure cycle.

    February 24, 2021 WebPage Regulatory News
    RESULTS 1 - 10 OF 6629