The supervisory authorities PRA, BoE, and FCA published a joint summary of policy decisions on operational resilience in the financial services sector. This development follows the July 2018 joint discussion paper on the approach to operational resilience and the subsequent December 2019 consultation to embed this proposed approach to policy. Each supervisory authority has published a separate package to set out the respective final policies on operational resilience, with the final policies becoming effective as of March 31, 2022. Firms and financial market infrastructures will need to have identified their important business services and set impact tolerances by March 31, 2022.
The following are the key highlights of the final policy package published by each supervisory authority:
- PRA published the policy statement PS6/21 that sets out new Operational Resilience Parts of the PRA Rulebook (Appendix 1), amendments to the Group Supervision Part of the PRA Rulebook (Appendix 1), a new supervisory statement SS1/21 on impact tolerances for important business services (Appendix 2), and a new Statement of Policy on operational resilience (Appendix 3). It also contains feedback to responses to the December 2019 consultation paper CP29/19 on operational resilience. After considering responses to CP29/19, PRA has amended certain aspects of the draft policy under the Operational Resilience Parts of the PRA Rulebook and SS1/21. PRA considers that these changes will not have a significant impact on firms and will not have a significantly different impact on "mutuals" than for other firms. PS6/21 will be effective from March 31, 2022 and is relevant to UK banks, building societies, and PRA-designated investment firms (banks) as well as the UK Solvency II firms, the Society of Lloyd’s, and its managing agents (insurers).
- BoE published individual policy statements and supervisory statements on the operational resilience expectations for central counterparties and central securities depositories. The policy on central counterparties and central securities depositories takes effect from March 31, 2022. Within a reasonable time after March 31, 2022 and in any event no later than March 31, 2025, central counterparties and central securities depositories are expected to take all reasonable actions to ensure they remain within their impact tolerances in the event of extreme but plausible disruption to operations. BoE also published a policy statement, supervisory statement, and Operational Resilience Chapter of the Code of Practice for Recognized Payment System Operators and Specified Service Providers. The amendments to the Code of Practice applies from March 31, 2022.
- FCA published the policy statement PS21/3 that sets out the final rules on operational resilience and provides feedback to the December 2019 consultation paper CP19/32. FCA mostly implemented the proposals as consulted on, with the exception of certain amendments to reflect the feedback received. PS21/3 applies to banks, building societies, PRA-designated investment firms, insurers, recognized investment exchanges, enhanced scope Senior Managers and Certification Regime (SM&CR) firms, and entities authorized and registered under the Payment Services Regulations 2017 or Electronic Money Regulations 2011. FCA rules and guidance will come into force on March 31, 2022. By March 31, 2022, firms must have identified their important business services, set impact tolerances for the maximum tolerable disruption, and carried out mapping and testing to a level of sophistication necessary to do so. Firms must also have identified any vulnerabilities in their operational resilience. As soon as possible after March 31, 2022, but no later than March 31, 2025, firms must have performed mapping and testing so that they are able to remain within impact tolerances for each important business service.
- Joint Policy Decisions (PDF)
- PRA Notification
- BoE Policy and Supervisory Statements
- FCA Policy Statement
- Joint Discussion Paper, July 2018 (PDF)
- Consultation, December 2019
Effective Date: March 31, 2022
Keywords: Europe, UK, Banking, Insurance, Securities, Operational Risk, Investment Firms, BoE, PRA, FCA
Previous ArticleHMT Issues Proposal to Mandate Climate-Related Financial Disclosures
APRA issued a letter on the loss-absorbing capacity (LAC) requirements for domestic systemically important banks (D-SIBs) and published a discussion paper, along with the proposed the prudential standards on financial contingency planning (CPS 190) and resolution planning (CPS 900).
The European Commission (EC) launched a call for evidence, until March 18, 2022, as part of a comprehensive review of the macro-prudential rules for the banking sector under the Capital Requirements Regulation (CRR) and Directive (CRD IV).
The Financial Stability Board (FSB) published a report that sets out good practices for crisis management groups.
The Australian Prudential Regulation Authority (APRA) found that Heritage Bank Limited had incorrectly reported capital because of weaknesses in operational risk and compliance frameworks, although the bank did not breach minimum prudential capital ratios at any point and remains well-capitalized.
The Office of the Superintendent of Financial Institutions (OSFI) released the annual report for 2020-2021.
Through a letter addressed to the banking sector entities, the Office of the Superintendent of Financial Institutions (OSFI) announced deferral of the domestic implementation of the final Basel III reforms from the first to the second quarter of 2023.
EIOPA recently published a letter in which EC is informing the European Parliament and Council that it could not adopt the set of draft regulatory technical standards for disclosures under the Sustainable Finance Disclosure Regulation (SFDR) within the stipulated three-month period, given their length and technical detail.
The Financial Conduct Authority (FCA) published the third in a series of policy statements that set out rules to introduce the UK Investment Firm Prudential Regime (IFPR), which will take effect on January 01, 2022.
The Australian Prudential Regulation Authority (APRA) published, along with a summary of its response to the consultation feedback, an information paper that summarizes the finalized capital framework that is in line with the internationally agreed Basel III requirements for banks.
The Committee on Payments and Market Infrastructures (CPMI) and the International Organization of Securities Commissions (IOSCO) issued a consultative report focusing on access to central counterparty (CCP) clearing and client-position portability.