Share on LinkedInShare on LinkedIn

ARTICLE · 15 JANUARY 2025

Operational Incident Reporting: UK Financial Regulators Propose New Rules

A&O Shearman
A&O Shearman
Contributor

A&O Shearman

Introducing A&O Shearman Unparalleled global depth for a changing world. Today more than ever,...

View firm profile
Explore more from A&O Shearman

UK financial regulators propose enhanced reporting requirements for operational incidents and third-party arrangements to improve resilience and mitigate disruptions. Firms must prepare for stricter standards, aligned with DORA, with enforcement likely from late 2025.

United KingdomFinance and Banking

The Financial Conduct Authority (FCA), Prudential Regulation Authority (PRA) and Bank of England are consulting on proposals to require firms to report operational incidents and material third party arrangements. In the face of increasing threats to organisations' ability to remain operationally resilient, regulators are looking at how they can help firms to monitor and minimise the impact of operational disruptions such as cyber-attacks or IT outages.

Why now?

Operational resilience is a key risk area being monitored by the UK regulators. It was brought sharply into focus in 2024 when a widely relied upon IT service provider released an update containing a defect that caused widespread systems-outages. The UK regulators have shared their lessons learned from this significant operational incident and are now focusing on how to strengthen the operational resilience framework applicable to regulated financial services firms by clarifying or enhancing regulatory

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

See more popular content from