Before you read on, what do you think the title refers to?
The answer is Business Risks.
The FCA has been highlighting this issue in workshops. They expect firms to ‘Identify, Assess & Manage’ risks and to be able to provide documentary proof that they are so doing.
They expect firms to have at least a Business Risk Management plan and ideally a Risk Register where known risks are recorded, along with proof that senior management have assessed the risks and planned mitigation strategies.



Regulatory permission – use it or lose it
Michael Senior Compliance 2021, FCA, ML, protection, Register
The FCA has published draft guidance on a new power that allows it to move faster to remove regulatory permissions that are no longer being used by financial services firms. Responses to the consultation (CP21/28) close on 29 October 2021. The driver behind the proposed power is the regulator’s belief that incorrect or outdated permissions […]