Before you read on, what do you think the title refers to?
The answer is Business Risks.
The FCA has been highlighting this issue in workshops. They expect firms to ‘Identify, Assess & Manage’ risks and to be able to provide documentary proof that they are so doing.
They expect firms to have at least a Business Risk Management plan and ideally a Risk Register where known risks are recorded, along with proof that senior management have assessed the risks and planned mitigation strategies.



Questions, questions…
Paul Jay Compliance 2023, FCA, Periodic Review, PI, platform, training, vulnerable, Xplan
As a result of firms needing to implement Consumer Duty this year (and many still don’t appear to have their act together yet), there hasn’t been much output from the regulator in the latter half of 2023. That has changed. In recent weeks the FCA seems to have issued more paper than confetti at a […]