Firms must assess their Senior Managers and Certification Staff are fit and proper (F&P) to perform their roles annually. The first annual assessment requirement was due to have been completed by 9 December 2019. However, the deadline was extended and is now required to be undertaken by 31 March 2021.
Certification staff
Individuals who are not F&P cannot commence, or continue to perform, certification functions.
Certification staff assessed as F&P must be provided with a Certificate confirming the firm is satisfied the person is F&P to perform the function to which the certificate relates and set out aspects of the affairs of the firm in which the person will be involved in performing the function.
The FCA has said that in a good implementation of F&P:
- The accountable Senior Manager should have adequate oversight over the certification process. This shouldn’t be delegated entirely to another function such as HR or Compliance.
- Firms should ensure they maintain up to date, accurate lists of their certification staff.
- There should be development plans where areas of improvement are identified during assessments.
There are some additional considerations for larger firms:
- When designing F&P assessment processes, first line management should own the process, giving thought to individual requirements for specific roles.
- Managers must be adequately trained so they know what is expected of them.
- Formalising capability frameworks and job descriptions help managers make consistent and thorough F&P assessments.
- The certification requirements should be integrated into existing HR and performance management processes, including what happens if someone fails the assessment.
- Some assessments will not be clear cut. Panels including senior managers can be used to consider marginal assessments.
The FCA’s website provides more information, including examples of positive and negative indicators of the Certification Regime.



FCA announce delay to multi-factor authentication
Richard Foster Compliance FCA, protection, Update
We wrote a few weeks ago about incoming changes to how firms access their FCA systems to upgrade data protection. You can read that article here. The new system will replace the current 6-digit passcode with the user needing to log in using a One Time Passcode (OTP). The implementation date of 20th January […]