UK Authorities Publish Discussion Paper on Critical Third Parties
The Bank of England (BoE), the Prudential Regulation Authority (PRA), and the Financial Conduct Authority (FCA) published a joint discussion paper that sets out potential measures to oversee and strengthen the resilience of services provided by critical third parties to the financial sector in UK. The discussion paper closes on December 23, 2022. Additionally, PRA published a consultation paper (CP13/22) that sets out the proposed changes to the criteria and scoring methodology PRA uses to identify other systemically important institutions (O-SIIs). The consultation closes on September 22, 2022.
The discussion paper sets out potential measures for how the supervisory authorities could use their proposed powers, which include:
- A framework for identifying potential critical third parties, which would inform the supervisory authorities’ recommendations for formal designation by HM Treasury.
- Minimum resilience standards, which would apply to the services that designated critical third parties provide to firms and financial market infrastructure firms (FMIs).
- A framework for testing the resilience of material services that critical third parties provide to firms and FMIs using a range of tools, including but not limited to scenario testing, participation in sector-wide exercises, cyber resilience testing, and skilled persons reviews of critical third parties.
These measures would complement, not replace, firms and FMIs’ existing responsibilities to manage risks from contracts with third parties. The supervisory authorities would only oversee the systemic risks arising from the services critical third parties provide to firms and FMIs. Subject to the outcome of Parliamentary debates on the Financial Services and Market Bill, and having considered responses to this discussion paper, the supervisory authorities plan to consult on their proposed requirements and expectations for critical third parties in 2023.
The proposals in CP13/22 would result in changes to the Statement of Policy on PRA’s approach to identifying O-SIIs (Appendix 1). The proposals would also result in an amendment to the Statement of Policy on interpretation of EU guidelines and recommendations with respect to BoE and PRA approach after the UK’s withdrawal from the EU (Appendix 2). The PRA’s approach to identifying O-SIIs currently follows the European Banking Authority’s (EBA) guidelines on criteria to assess O-SIIs. The EBA guidelines set out a two stage process for O-SII identification. The first stage is a minimum mandatory framework, which consists of a prescribed set of criteria, indicators, and weights that authorities should use to identify the institutions that must be designated as O-SIIs. The second stage offers authorities the discretion to overlay the mandatory part of the framework, in order to better reflect the specificities of the national banking sector, and if appropriate, designate additional firms as O-SIIs. PRA uses its own scoring methodology under this stage. The proposed amendments involve:
- the removal of EBA’s scoring methodology from the O-SII identification process, and deletion of the EBA guidelines, such that O-SII identification is based solely on the PRA’s scoring methodology
- updates to specific indicators and weights in the PRA’s scoring methodology for O-SII identification.
PRA proposes that the implementation date for the changes resulting from CP13/22 would be on the date of publication of the final revised Statement of Policy. PRA, therefore, expects to carry out the 2022 O-SII designation process under the revised approach. In line with the Statement of Policy, PRA will publish the list of firms designated as O-SIIs under this process by December 01, 2022.
Related Links
- Press Release
- Discussion Paper on Operational Resilience
- Consultation Paper on Identification of O-SIIs
Keywords: Europe, UK, Banking, Securities, Critical Third Parties, Discussion Paper, FMI, O-SII, Statement Of Policy, Regulatory Capital, Basel, Operational Resilience, Cyber Risk, Regtech, Outsourcing Arrangements, Cloud Computing, BoE, PRA, FCA
Featured Experts

María Cañamero
Skilled market researcher; growth strategist; successful go-to-market campaign developer

Nicolas Degruson
Works with financial institutions, regulatory experts, business analysts, product managers, and software engineers to drive regulatory solutions across the globe.

Patrycja Oleksza
Applies proficiency and knowledge to regulatory capital and reporting analysis and coordinates business and product strategies in the banking technology area
Related Articles
EBA Proposes Standards for IRRBB Reporting Under Basel Framework
The European Banking Authority (EBA) proposed implementing technical standards on the interest rate risk in the banking book (IRRBB) reporting requirements, with the comment period ending on May 02, 2023.
FED Issues Further Details on Pilot Climate Scenario Analysis Exercise
The U.S. Federal Reserve Board (FED) set out details of the pilot climate scenario analysis exercise to be conducted among the six largest U.S. bank holding companies.
US Agencies Issue Several Regulatory and Reporting Updates
The Board of Governors of the Federal Reserve System (FED) adopted the final rule on Adjustable Interest Rate (LIBOR) Act.
ECB Issues Multiple Reports and Regulatory Updates for Banks
The European Central Bank (ECB) published an updated list of supervised entities, a report on the supervision of less significant institutions (LSIs), a statement on macro-prudential policy.
HKMA Keeps List of D-SIBs Unchanged, Makes Other Announcements
The Hong Kong Monetary Authority (HKMA) published a circular on the prudential treatment of crypto-asset exposures, an update on the status of transition to new interest rate benchmarks.
EU Issues FAQs on Taxonomy Regulation, Rules Under CRD, FICOD and SFDR
The European Commission (EC) adopted the standards addressing supervisory reporting of risk concentrations and intra-group transactions, benchmarking of internal approaches, and authorization of credit institutions.
CBIRC Revises Measures on Corporate Governance Supervision
The China Banking and Insurance Regulatory Commission (CBIRC) issued rules to manage the risk of off-balance sheet business of commercial banks and rules on corporate governance of financial institutions.
HKMA Publications Address Sustainability Issues in Financial Sector
The Hong Kong Monetary Authority (HKMA) made announcements to address sustainability issues in the financial sector.
EBA Updates Address Basel and NPL Requirements for Banks
The European Banking Authority (EBA) published regulatory standards on identification of a group of connected clients (GCC) as well as updated the lists of identified financial conglomerates.
ESMA Publishes 2022 ESEF XBRL Taxonomy and Conformance Suite
The General Board of the European Systemic Risk Board (ESRB), at its December meeting, issued an updated risk assessment via the quarterly risk dashboard and held discussions on key policy priorities to address the systemic risks in the European Union.