UK Operational Resilience (FCA SYSC 15A / PRA SS1/21)
Important business services, impact tolerances, mapping and scenario testing.
- Issued by
- FCA / PRA
- Applies in
- United Kingdom
- Edition
- PS21/3 — fully in force 31 March 2025
- Area
- Operational resilience & ICT
What an assessor reads first.
The headline requirements in Amoreg’s catalogue, in the issuer’s own numbering where it has one. They are where a review starts, not a transcription of the text.
- IBSImportant business services identifiedResilience
- ITImpact tolerances set and approved by the boardResilience
- MAPMapping of people, processes, technology and third partiesResilience
- TSTScenario testing of severe but plausible disruptionsTesting
- SAAnnual self-assessmentGovernance
How Amoreg keeps you on it.
Enable the UK Operational Resilience (FCA SYSC 15A / PRA SS1/21) and add FCA / PRA’s pages as a monitor of your own. Every publication it records keeps its source, stage and date.
Inspector reads your policies against these 5 requirements every week and opens a finding wherever one falls short, citing the rule and drafting the fix. A person decides what is applied.
Each week
- Read FCA / PRA’s pages
- Check the library against 5 requirements
- Open findings with drafted fixes
- Wait for a person to decide
Policy does not yet set out: important business services identified
- Rule
- UK Operational Resilience (FCA SYSC 15A / PRA SS1/21), IBS
- Area
- Resilience
- Proposed by
- Inspector
- Decided by
- A named person, once reviewed
The same ground, elsewhere.
- DORA — Digital Operational Resilience ActICT risk management, incident reporting, resilience testing and third-party risk for financial entities.European Union · 8 controls
- NIS2 DirectiveCybersecurity risk-management measures and incident reporting for essential and important entities.European Union · 4 controls
- CSSF Circular 20/750 — ICT and security risk managementEBA ICT and security risk guidelines applied to Luxembourg entities outside DORA's scope.Luxembourg · 5 controls
- CSSF Circular 22/806 — Outsourcing arrangementsThe single outsourcing framework, now applying to DORA entities for business process outsourcing only.Luxembourg · 5 controls
- Central Bank of Ireland — Operational Resilience & Outsourcing GuidanceThe cross-industry guidance on operational resilience and on outsourcing.Ireland · 4 controls
- MAS Technology Risk Management GuidelinesTechnology risk governance, security, resilience and third-party expectations for financial institutions.Singapore · 5 controls
Also in United Kingdom
- UK Money Laundering Regulations 2017The Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017.United Kingdom · 8 controls
- JMLSG GuidanceHM Treasury-approved guidance the courts must consider — the practical standard for UK financial sector AML.United Kingdom · 6 controls
- Proceeds of Crime Act 2002 (Part 7)The money laundering offences, the regulated-sector duty to report, and the DAML consent regime.United Kingdom · 4 controls
- UK Sanctions Regime (SAMLA 2018 / OFSI)The Sanctions and Anti-Money Laundering Act 2018 regulations and OFSI reporting, licensing and enforcement expectations.United Kingdom · 5 controls
- Legal Sector Affinity Group AML GuidanceHM Treasury-approved guidance for law firms and independent legal professionals under the MLR 2017.United Kingdom · 5 controls
- CCAB AML Guidance for the Accountancy SectorAMLGAS — the approved guidance for accountants, auditors, tax advisers and insolvency practitioners.United Kingdom · 5 controls
Questions
Does Amoreg watch for changes to the UK Operational Resilience (FCA SYSC 15A / PRA SS1/21)?
Enable it and add the issuer’s pages as a monitor of your own. Every publication the Monitor records keeps its source, stage and date.
Can Amoreg check our policies against the UK Operational Resilience (FCA SYSC 15A / PRA SS1/21)?
Yes. Inspector reads your library against its requirements every week and opens a finding, with the rule it cites and a proposed fix, wherever a policy falls short. A person decides what is applied.
Which edition does Amoreg use?
The catalogue records PS21/3 — fully in force 31 March 2025. Editions were last verified in August 2026, and the Monitor records new publications as they appear.