2025-09-12
The Financial Sector Conduct Authority and Prudential Authority have issued a draft determination mandating a standardized notification template for material IT and cyber incidents under their 2023 and 2024 Joint Standards. Financial institutions must submit incident reports using this template, with stakeholder comments due by 5 October 2025 to designated regulatory email addresses. The directive streamlines compliance reporting and strengthens regulatory oversight of cybersecurity resilience across the financial sector.