FCA Reviews Technology Change Management in Financial Services Sector
FCA published the findings from a review that looked at how financial firms manage technology change, the impact of change failures, and the practices utilized in the industry to help reduce the impact of incidents resulting from change management. While there is no single approach, process, or control that improves change success rates, the analysis found that stronger governance, day-to-day risk management, increased automation, and more robust testing and planning can contribute to successful change activity and less disruption.
Based on the review, FCA found that firms with higher change success rates had the following common characteristics:
- Firms with well-established governance arrangements have a higher change success rate. There was a positive correlation between the longevity of governance arrangements and higher change success rates in the sampled firms. The data showed that robust governance can help reduce the number and impact of operational incidents resulting from change.
- Relying on high levels of legacy technology is linked to more failed and emergency changes. FCA found that firms with a lower proportion of legacy infrastructure and applications had a higher change success rate. Firms with a lower proportion of legacy technology also had a lower proportion of changes being deployed as emergencies and had a higher chance of those emergency changes being successfully deployed.
- Firms that allocated a higher proportion of their technology budget to change activities experienced fewer change related incidents. Firms that had the lowest proportion of changes resulting in an incident dedicated between 50% and 75% of their information technology budget to these change activities.
- Frequent releases and agile delivery can help firms to reduce the likelihood and impact of change related incidents. FCA found that firms that deployed smaller, more frequent releases had higher change success rates than those with longer release cycles. Firms that made effective use of agile delivery methodologies were also less likely to experience a change incident.
- Effective risk management is an important component of effective change management capabilities. Firms that experienced less incidents due to failed changes mitigated the risk of technology change by leveraging a wide range of technical and business knowledge to ensure that potential impacts were well understood.
In addition, FCA identified the following areas that could lead to increased operational disruption when carrying out change activity:
- Most firms do not have complete visibility of third-party changes. According to firms’ incident reporting, in 2019, over 20% of incidents at third-parties were caused by change. Workshop attendees suggested that third-party contracts could be better utilized to provide greater clarity on how changes are communicated and on the potential impact to the information technology estate of a client firm.
- Firms’ change management processes are heavily reliant on manual review and actions. Repeatability and consistency throughout the lifecycle of a change and its deployment could help reduce the burden of assurance activity and could also allow for a higher degree of confidence when implementing technology change.
- Legacy technology impacts firms’ ability to implement new technologies and innovative approaches. Firms that classified a higher proportion of their technology estate as legacy had lower adoption rates for DevOps, micro-architecture, and public cloud, which could affect the ability of these to benefit from innovative approaches.
Related Links
Keywords: Europe, UK, Banking, Securities, Technology Risk, Governance, Fintech, Change Management, Operational Risk, Third-Party Arrangements, Cloud Computing, Outsourcing Arrangements, FCA
Previous Article
HM Treasury Allows Extended Repayment Delay Under COVID Loan SchemeRelated Articles
APRA Decides to Standardize Submission Date for Quarterly Reporting
APRA announced the standardization of quarterly reporting due dates for authorized deposit-taking institutions.
Bundesbank Publishes Supporting Documentation for Reporting by Banks
Bundesbank published a list of "EntryPoints" that are accepted in its reporting system; the list provides taxonomy version and name of the module against each EntryPoint.
ECB Working Group Publishes Recommendations on EURIBOR Fallbacks
The private sector working group of ECB on euro risk-free rates published the recommendations to address events that would trigger fallbacks in the Euro Interbank Offered Rate (EURIBOR)-related contracts, along with the €STR-based EURIBOR fallback rates (rates that could be used if a fallback is triggered).
EBA Publishes Phase 1 of Reporting Framework 3.1
EBA published the phase 1 of its reporting framework 3.1, with the technical package covering the new reporting requirements for investment firms (under the implementing technical standards on investment firms reporting).
APRA to Finalize Capital Adequacy Standard Revisions by January 2022
Asia Pacific Australia Banking APS 111 Capital Adequacy Regulatory Capital Basel RBNZ APRA
ESMA Issues Guidelines on Outsourcing to Cloud Service Providers
ESMA published the final guidelines on outsourcing to cloud service providers.
EBA Publishes Data on Deposit Guarantee Schemes
EBA published annual data for two key concepts and indicators in the Deposit Guarantee Schemes (DGS) Directive—available financial means and covered deposits.
OSFI Sets Out Plan for Future Guidance on Managing Technology Risk
OSFI has set out the schedule for release of draft guidance on the management of technology risks by federally regulated financial institutions and private pension plans.
MAS Updates Housing Loan Rules, Proposes Corporate Governance Guidance
MAS updated rules for new housing loans by banks and finance companies.
HKMA Publishes Guideline on Sustainable Finance Grant Scheme
HKMA published a statement on the 100% Personal Loan Guarantee Scheme and a guideline on the Green and Sustainable Finance Grant Scheme (GSF Grant Scheme) as announced in the 2021-22 Budget.
