The FCA, Bank of England and Prudential Regulation Authority have together signed a Memorandum of Understanding (MoU) with the European Supervisory Authorities to enhance cooperation and oversight of critical third parties (CTPs) that fall under the UK’s CTP regime.The MoU establishes a framework for coordinating and sharing information on the oversight of CTPs under the UK regime and critical third party providers (CTPPs) under the EU’s Digital Operational Resilience Act (DORA), including during incidents such as power outages or cyber-attacks.The MoU aims to manage potential risks to financial stability and market confidence, as well as strengthen international cooperation. It will also help reduce duplication and regulatory burden on CTPs and CTPPs.The UK’s CTP regime complements similar international standards and is designed to be compatible with DORA. The agreement demonstrates UK regulators’ commitment to cross-border cooperation and strengthening operational resilience to support growth and promote market stability.BackgroundIn 2024, UK regulators introduced new rules to bolster the resilience of critical third parties providing key services to the financial sector.These rules came into effect on 1 January 2025 and apply once a CTP is designated by the Treasury.The Treasury is responsible for deciding which third party service providers should fall under the new CTP regime. The rules will require designated CTPs to provide regular assurance, undertake resilience testing and report major incidents.The designation process has begun and the regulators will continue to work with the Treasury throughout the designation process.The regime does not reduce the responsibility of financial firms and Financial Market Infrastructures (FMIs) to manage their own operational resilience and third-party risks in line with existing outsourcing rules.
CLICK HERE to read this article and more on FCA.
What is FCA? We protect people by helping them understand some of the most common risks they might come across when using financial services.
We publish warnings about firms that are doing business without our authorisation, and we encourage consumers to report scams, potential harm or bad conduct to us.
Our ScamSmart campaign targets individuals who are most at risk of investment fraud and pension scams. Our InvestSmart campaign also warns newer investors about the risks of investing online.
We want to help consumers protect themselves, so we work with consumer organisations to raise awareness of what we do. These organisations also help inform our approach to regulation.