First published on 29 March 2021
The Prudential Regulation Authority (PRA) considers that for firms to be operationally resilient, they should be able to prevent disruption occurring to the extent practicable; adapt systems and processes to continue to provide services and functions in the event of an incident; return to normal running promptly when a disruption is over; and learn and evolve from both incidents and near misses. Therefore, operational resilience is an outcome that is supported by several parts of the PRA’s regulatory framework.
This Statement of Policy (SoP) clarifies how the PRA’s operational resilience policy affects its approach to four key areas of the regulatory framework in particular:
- governance;
- operational risk management;
- business continuity planning; and
- the management of outsourced relationships.
This SoP is relevant to all:
- UK banks, building societies, and PRA-designated investment firms; and
- UK Solvency II firms, the Society of Lloyd’s, and its managing agents.