CP17/26: Individual accountability - extending the Senior Managers and Certification Regime to insurers — FCA — GB

Consultation Paper
CP17/26*
July 2017
Individual Accountability:
Extending the Senior Managers &
Certification Regime to insurers

CP17/26 Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers We are asking for comments on this Consultation Paper by 3 November 2017. You can send them to us using the form on our website at:
www.fca.org.uk/cp17-26-responseform.
Or in writing to:
Governance & Professionalism Policy
Strategy & Competition
Financial Conduct Authority
25 The North Colonnade
Canary Wharf
London E14 5HS
Email:
cp17-26@fca.org.uk
How to respond Contents
1 Overview 3
2 Guide to the regime 12
3 The Senior Managers Regime 15
4 Certification Regime 33
5 Fit and Proper requirements 40
6 Conduct Rules 43
7 UK branches of foreign firms 48
8 Insurance Special Purpose Vehicles 53
Annex 1
Summary of the cost benefit analysis 56
Annex 2
List of questions 63
Annex 3
Compatibility statement 66
Annex 4
Abbreviations used in this paper 70
Appendix 1
Draft Handbook text 72 returns you to the contents list takes you to helpful abbreviations How to navigate this document onscreen

CP17/26
Chapter 1
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers 1 Overview
1.1 This Consultation Paper proposes changes to how we regulate people working in
insurance and reinsurance firms (collectively referred to as ‘insurers’ in this document).
1.2 Insurers currently apply a revised version of the Financial Conduct Authority’s
Approved Persons Regime and the Prudential Regulation Authority’s Senior Insurance Managers Regime. We propose building on this framework and introducing all elements of the Senior Managers and Certification Regime.
1.3 The Prudential Regulation Authority is consulting simultaneously on similar changes
for insurers. We have been working closely to ensure our respective proposals are fully aligned and compatible. Context Background
1.4 In March 2016, for banks we replaced the Approved Persons Regime (APR) with the
Senior Managers and Certification Regime (SM&CR).1 This followed recommendations from the Parliamentary Commission on Banking Standards (PCBS), which reviewed the banking industry following the financial services crisis in 2008. The PCBS recommended a new accountability framework that was more focused on senior management, and that firms should take more responsibility for making sure their employees are fit and proper. The PCBS also emphasised that there needed to be better standards of conduct at all levels in banks.
1.5 The original legislation did not cover insurers. However, considering the risks that
such firms pose, and as part of implementing the EU Solvency II Directive’s guidance on systems of governance, the Prudential Regulation Authority (PRA) introduced the Senior Insurance Managers Regime (SIMR). We revised APR to complement the PRA’s proposals.
1.6 SIMR and the APR revisions came into force on 7 March 2016. The key features of our
current rules include:

12 Significant Influence Functions (SIFs) and the Customer-Dealing function–People
in these roles need to be approved by us.
Selected Non-Executive Directors, such as the Chair of the Nominations and
With‑Profits Committees, who also need our approval.
Each person approved by us needs to have a ‘Scope of Responsibilities’ document
setting out what they are accountable for. Insurers need to send these to the FCA on request. 1 By banks, we mean all deposit-taking institutions.

CP17/26
Chapter 1
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers

A requirement for firms, except small Non-Directive Firms (NDFs), to develop a
governance map. This document covers all Senior Managers and Key Function Holders (under SIMR), as well as senior individuals of interest to the FCA. Governance maps also need to be sent to us on request.
Basic rules of conduct apply to anyone approved by the FCA or PRA. These are an
important tool in ensuring Senior Managers are clear about our expectations of their conduct.
1.7 In May 2016, Parliament amended FSMA to give us the obligation to extend much of
the SM&CR to all our regulated firms, including insurers. As a result we are replacing APR with the SM&CR for insurers. Who does this consultation affect?
1.8 Our proposals will affect all insurers and reinsurers regulated by the FCA and the PRA,
ranging from very small firms outside the scope of the Solvency II Directive, to some of the largest global firms. Specifically, they cover:
All firms in scope of the UK rules implementing the Solvency II Directive (Solvency II
firms). This includes the Society of Lloyd’s, managing agents, incoming branches of non-UK firms and Insurance Special Purpose vehicles (ISPVs) , but excludes some firms able to rely on transitional provisions. Our proposals will affect most staff in those firms, including (but not limited to) most of the existing approved individuals.
All insurers outside the scope of the Solvency II Directive (referred to in this CP
as Non-Directive firms or NDFs), approved people and most other staff within those firms. The PRA defines a small NDF as a firm where the value of assets for all the regulated activities it carries out is £25,000,000 or less. NDFs exceeding this threshold qualify as ‘large’ NDFs.
1.9 The proposals in this consultation do not affect Approved Persons of Appointed
Representatives of firms. We will confirm how we intend to approach the SM&CR for Appointed Representatives in a follow-up Consultation Paper later this year. Principal firms, including the Senior Managers of principal firms, remain fully responsible for ensuring that their Appointed Representatives and networks comply with our rules. Aims of the SM&CR
1.10 The SM&CR is a key part of our priority of Culture & Governance at firms set out in
our 2017/18 Business Plan. Culture is the product of a number of different drivers within firms and is shaped by many influences that drive the behaviour of everyone in an organisation. The ‘tone from the top’, the effectiveness of management and governance and incentive structures, all contribute to the overall culture of a firm.
1.11 Firms need to have effective governance arrangements that are suitable for the size
and scale of the risks they run – with a strategy to manage and mitigate these risks to deliver appropriate outcomes for consumers and markets.

CP17/26
Chapter 1
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers
1.12 The purpose of the SM&CR isn’t to change how firms organise themselves or to
require firms to hire people to fill specific functions. It is for firms to decide how best to structure themselves, taking into account factors such as size and complexity, best practice, and requirements in law and regulations. The SM&CR will reinforce and clarify the expectations of individuals within these governance structures.
1.13 Firms’ Senior Managers have a crucial role in delivering effective governance.
This includes taking personal responsibility and accountability for their decisions and exercising rigorous oversight of the business areas they lead. We want all firms to develop a culture of accountability at all levels and for senior individuals to be fully accountable for defined business activities and material risks.
1.14 This should, over time, result in improved culture and governance in the industry.
It should also promote public confidence that firms have the right people in the right roles, working in the interests of consumers and markets. Our approach to designing the SM&CR
1.15 There are many different types of insurers that will be subject to the SM&CR, ranging
from the very small to some of the largest global firms.
1.16 Given the differences in the size and nature of these firms, we don’t consider it’s
appropriate to take exactly the same approach as we did for banks or for all types of insurers. While we want to ensure there are consistent principles across financial services, we also want the new regime to be clear, proportionate to the risks posed to our objectives, and flexible enough to accommodate the different business models and governance structures of insurers. We want the regime to be as simple as possible for firms to understand and for us to regulate.
1.17 With this in mind, we propose applying the full SM&CR to Solvency II firms and large
NDFs, and a streamlined regime for small NDFs, small run – off firms 2 and ISPVs. This is, an approach designed to be proportionate to the potential harm these firms are able to cause. Our proposals build on the SIMR and the revised APR. Please see Table 1 for a summary of what this means in practice.
1.18 However, it is also important to note:

All insurers will be subject to our Certification Regime, Fit and Proper tests, and
Conduct Rules requirements, which are described in Chapters 4, 5 and 6 respectively.
The Senior Managers Regime (SMR), described in Chapter 3, will apply to all insurers.
However, some of the SMR’s features will not apply to small NDFs and ISPVs. For small NDFs and ISPVs the existing higher level governance requirements in these areas will continue to apply.
Not all insurers will be subject to the same list of Senior Management Functions. For
example, a small NDF won’t need to apply the same functions as a Solvency II firm. 2 PRA define a small run-off firm as a firm with less than £25 million technical provisions that no longer have permission to write or acquire new business.

CP17/26
Chapter 1
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers

The full list of Prescribed Responsibilities (PRs), detailed in paragraph 3.56, will
apply to Solvency II firms and large NDFs. There are fewer PRs for small NDFs, third‑country branches and ISPVs. PRs will not apply to EEA Branches.
Some of the roles currently requiring approval under APR will no longer need FCA
approval. Instead, they will be covered under the Certification Regime. Summary of our proposals
1.19 Table 1 below provides a high-level overview of our proposals and the rest of this CP
explains these in more detail.
Table 1: Summary of SM&CR tools
Tools
Solvency II &
Large NDFs
Small NDFs
& Small Run – off firms
EEA
Branches
Non-EEA
Branches ISPVs
Senior
Management
Functions
(FCA only)
Executive
Director
Partner
Other Overall
Responsibility
Compliance
Oversight
Money
Laundering
Reporting
Officer
Chair of
Nominations
Committee
Chair of the
With – Profits
Committee4
Conduct Risk
Oversight
Officer (Lloyd’s)
Executive
Director
Partner
Compliance
Oversight
Money
Laundering
Reporting
Officer
EEA Branch
Senior
Manager
Money
Laundering
Reporting
Officer
Executive
Director
Partner
Compliance
Oversight
Money
Laundering
Reporting
Officer
Other Local
Responsibility
Executive
Director
Partner
Compliance
Oversight
Duty of
Responsibility
Applies to all firms
Prescribed
Responsibilities
19 in total, 3
FCA only
9 in total, 3
FCA only
N/A 14 in total, 3
FCA only
4 in total, 2
FCA only
Statements of
Responsibilities
Applies to all firms
Responsibilities
Maps
√ X √ √ X
Handover
Procedures
√ X
Overall
Responsibility
√ X X √ X
3 Note this includes the person(s) responsible for the with-profits advisory arrangement

CP17/26
Chapter 1
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers Tools Solvency II & Large NDFs Small NDFs & Small Run – off firms EEA Branches Non-EEA Branches ISPVs Certification Regime Applies to all firms Fit and Proper Applies to all firms Conduct Rules Applies to all firms Our proposed Senior Managers Regime
1.20 We propose approving the most senior people performing key roles in insurance
firms. Our Handbook will set out which functions (or roles) are Senior Management Functions. We propose the following functions for all Solvency II firms and large NDFs, in addition to the PRA’s proposed Senior Management Functions:

Executive Directors
Compliance Oversight
Money Laundering Reporting Officer
Conduct Risk Oversight Officer (Lloyd’s only)
Other Overall Responsibility
Chair of Nominations Committee
Chair of the With-Profits Committee4
1.21 Many firms won’t need to apply all of these functions, eg insurers don’t need to hire
extra staff to be the Chair of the Nominations Committee if they don’t have someone already performing that function (this is the same under APR).
1.22 The underlying legislation:
obliges the regulators to require a ‘Statement of Responsibilities’ document to
be provided when a Senior Manager is applying for approval. This sets out the areas of the business that the prospective Senior Manager will be responsible and accountable for. Insurers already have to have a Scope of Responsibilities, which is identical in substance to the new Statement of Responsibilities. We are simply changing the name of these to be consistent with the new legislation.
allows the FCA to take action against a Senior Manager if they fail to take
‘reasonable steps’ to prevent regulatory breaches in their areas of responsibility, ie the ‘duty of responsibility’. This means that if something goes wrong in an area they’re responsible for, we will be interested in whether they took steps that could reasonably be expected of a person in their position to stop this from happening (or continuing). This is a new obligation.
1.23 We also propose some new responsibilities that firms will need to allocate to their
Senior Managers, known as Prescribed Responsibilities. These are in addition to the 4 Including the person responsible for the with-profits advisory arrangement.

CP17/26
Chapter 1
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers Prescribed Responsibilities the PRA introduced as part of the SIMR, and will ensure a Senior Manager is accountable for key conduct risks. The full list of PRs, detailed in paragraph 3.56 will apply to Solvency II firms (other than EEA and non-EEA branches, ISPVs and small run-off firms) and large NDFs. There are fewer PRs for small NDFs, non-EEA branches, and ISPVs. PRs will not apply to EEA branches.
1.24 For Solvency II firms (other than ISPVs and small run-off firms) and large NDFs,
firms must also provide a Responsibilities Map as part of the application process. This is described in paragraphs 3.75–3.79. Again, insurers are already required to have governance maps. Responsibilities Maps will replace governance maps, but the requirement to have such a map is not a big change for insurers, as these documents are identical in substance. Our proposed Certification Regime
1.25 This is the biggest single change for insurers. The Certification Regime will apply to
employees who aren’t Senior Managers but whose role means it’s possible for them to cause significant harm to the firm or its customers. The Certification Regime is made up of eight Significant Harm Functions, which we refer to in this document as Certification Functions.
1.26 These people don’t need to be approved by us, but firms will need to check and
confirm (‘certify’), at least once a year, that they are fit and proper to perform their role.
1.27 Our Handbook will set out the roles that are Certification Functions. They include:

Significant Management function
Proprietary traders
CASS oversight function
functions subject to qualification requirements
Client Dealing function
Algorithmic Traders
Material Risk Takers
Anyone who supervises or manages a person performing a Certification Function
1.28 We recognise that in practice some of the Certification Functions are more relevant to
banks/investment firms and won’t apply to insurance firms.
Our proposed Conduct Rules
1.29 The Conduct Rules set high-level standards of behaviour that will apply to almost all
employees who perform financial services activities in a firm. Although Conduct Rules currently apply to insurers, their application is limited to Approved Persons. We now propose applying Conduct Rules to:
anyone approved by the FCA as a Senior Manager
anyone covered by the Certification Regime

CP17/26
Chapter 1
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers

all other employees other than ancillary5
staff
1.30 We propose applying our Conduct Rules to the above individuals in relation to both a
firm’s regulated, and unregulated, financial services activities.
1.31 Our proposed conduct rules are intended to drive up standards of individual behaviour
in financial services. They represent a meaningful change in the standards of conduct we expect from those working in the industry. By applying the conduct rules to a broad range of staff we aim to improve individual accountability and awareness of conduct issues across firms.
1.32 FSMA requires firms to train their staff so that they know how the Conduct Rules apply
to them. Firms must also notify the FCA when they’ve taken formal disciplinary action against a person for breaching a Conduct Rule. Our proposed SM&CR for small NDFs and ISPVs
1.33 Small NDFs are currently subject to fewer requirements than larger insurers.
We propose to take a similarly proportionate approach to implementing the SM&CR. We therefore propose introducing:
four Senior Management Functions
Statements of Responsibilities (consistent with our proposals for Solvency II firms)
three FCA-only PRs, plus an additional two shared with the PRA
the Certification Regime and Conduct Rules (as for Solvency II firms)
1.34 We propose specifying three Senior Management Functions to ISPVs, although we
don’t necessarily expect firms with simple governance structures to have all of these.
1.35 The Overall Responsibility requirement and the requirement for a Responsibilities Map
will not apply to small NDFs or ISPVs. However, the requirement in SYSC 2.1.3CR of dealing with the apportionment of responsibilities will continue.
1.36 In January 2017, we consulted on the new regime for ISPVs issuing Insurance Linked
Securities (ILSs)6 that we expect to come into force in summer 2017. Building on the proposals in that CP, we propose fewer requirements for ISPVs than for larger insurers (see Chapter 8 for these proposals). Our proposed SM&CR for incoming branches of non-UK firms
1.37 This CP also outlines our proposals for incoming branches of non-UK firms.
These comprise both European Economic Area (EEA) and non-EEA branches. We propose applying the Certification Regime and Conduct Rules to both EEA and non-EEA branches.
1.38 For EEA branches, under the SMR we propose introducing two new Senior
Management Functions. However, PRs won’t apply, as this is a matter for the home state regulator. 5 Ancillary staff are people who perform a role that is not specific to the financial services business of the firm (eg, catering staff, receptionists etc). 6 www.fca.org.uk/publication/consultation/cp17-03.pdf

CP17/26
Chapter 1
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers
1.39 For non-EEA branches, we propose:

five Senior Management Functions
Statements of Responsibilities (as for Solvency II firms)
removing the Actuarial Conduct Function
a shorter list of PRs
Responsibilities Maps
Is this of interest to consumers?
1.40 Consumers will be interested in how individual accountability is being improved
within firms, and how staff they interact with will be required to comply with new Conduct Rules. Equality and diversity considerations
1.41 We have considered the equality and diversity issues that may arise from the proposals
in this Consultation Paper.
1.42 The proposals will allow more than one person to perform a Senior Management
Function or a function in scope of the Certification Regime at the same firm. If this were not the case, the proposals could be deemed to discriminate indirectly against people working under a job-share arrangement, for example due to family obligations.
1.43 Overall, we do not consider that the proposals in this Consultation Paper raise
concerns about equality and diversity issues. We also don’t think that the proposals result in any discrimination for any of the groups with protected characteristics, ie age, disability, sex, marriage or civil partnership, pregnancy and maternity, race, religion and belief, sexual orientation and gender reassignment.
1.44 We will continue to consider the equality and diversity implications of the proposals
during the consultation period, and will revisit them when publishing the final rules.
1.45 In the interim, we welcome any input to this consultation on the matter.
Next steps
What do you need to do next?
1.46 If you are an insurer regulated by the FCA and are currently subject to the Approved
Persons Regime, you should read this Consultation Paper, paying particular attention to the sections marked for your type of firm. People who work in these firms might also be interested in how these proposals affect them.

CP17/26
Chapter 1
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers
1.47 We want to know what you think of our proposals. This consultation will be open for
three months so please send us your comments by 3 November 2017. You can use the form on our website or write to us at the address on page 2.
1.48 These proposals sit alongside our proposals for applying the SM&CR to all other
solo‑regulated firms. For more information on these proposals, please see CP17/25 or visit our website.
1.49 We will consult separately later this year on changes following the extension of the
SM&CR. This will include how firms will transition into the new regime, and any changes we will need to make to our forms and other parts of our Handbook (the ‘technical Consultation Paper’). The same principles of simplicity and proportionality will apply when we consider how to transition firms to the new regime – for example, minimising the need for firms and individuals to apply for new approval as a Senior Manager if they are already an Approved Person. We have developed the policy in this Consultation Paper in the context of the existing UK and EU regulatory framework. We will keep the proposals under review to assess whether any amendments may be required in the event of changes in the UK regulatory framework, including as a result of any negotiations following the UK’s vote to leave the EU.
1.50 Firms should read this CP alongside the PRA’s corresponding CP.7
1.51 A summary cost-benefit analysis is available in Annex 1, page 56.
1.52 We are consulting separately on how the SM&CR will apply to all other
FSMA‑authorised firms, in addition to insurers in CP17/25.
What will we do?
1.53 We will consider your feedback and publish our rules in a Policy Statement next year.
1.54 The regime won’t come into effect until we publish our final rules and set a date for
them to commence.
1.55 For more information on next steps, please visit our website.
7 www.bankofengland.co.uk/pra/Pages/publications/cp/2017/cp1417.aspx

CP17/26
Chapter 2
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers 2 Guide to the regime
2.1 To help you understand our Consultation Paper, we’ve provided:

a diagram showing the key elements of the regime for all firms (see below)
a Glossary of Terms with a short description of each tool (see page 13)
Certifi cation Regime
Senior Manager
Conduct
Rules
Senior Managers Regime
The most senior people in fi rms. Anyone who performs a Senior Management Function
needs to be approved by us.
Core requirements:
It applies to all insurers, however some of its features will apply only to SII fi rms and
Large NDFs.
Senior
Management
Functions
Duty of
Responsibility
Handover
Procedures
Statement of
Responsibilities
Responsibilities
Maps
Overall
Responsibility
Criminal Records
Checks
Prescribed
Responsibilities
Fit and
Proper
Requirements
(including
Regulatory
References)
Individual
Conduct Rules
All staff who perform fi nancial services roles, except ancillary staff (for example, caterers,cleaners and security staff )
The Certifi cation Regime is a new tool for all Insurers.
People who aren’t Senior Managers but whose job can cause signifi cant harm to the fi rm or
its customers.
We don’t approve these people, but fi rms need to check and confi rm that these people are
suitable to do their job at least once a year.
Apply to SII fi rms
& Large NDFs only
Other Staff
Note:
Conduct Rules, the Fit and Proper Requirements and Regulatory References will also apply to all Non-Executive Directors, even if they aren’t a Senior Manager.

CP17/26
Chapter 2
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers Glossary of Terms Term Description Who does it apply to? Where can I read more? Ancillary staff Employees who aren’t covered by the Conduct Rules, such as cleaners, receptionists, catering staff and security staff. All insurers Chapter 6, paragraph 6.14 Certification Function A function performed by employees who are not Senior Managers but who could pose a risk of ‘significant harm’ to the firm or its customers. The Certification Functions are defined in our Handbook but we do not approve these people. All insurers Chapter 4, paragraph 4.7 Certification Regime This describes the overarching regime that covers Significant Harm Functions. All insurers Chapter 4 Criminal records checks A requirement for firms to conduct criminal records checks for Senior Managers and Non-Executive Directors (where a fitness requirement applies) as part of checking that they are fit and proper. All insurers Chapter 5, paragraph 5.8 Duty of Responsibility Every Senior Manager will have a duty of responsibility as a result of FSMA. This means that if a firm breaks one of our requirements, the Senior Manager responsible for that area could be held accountable if they did not take ‘reasonable steps’ to prevent or stop the breach. All insurers Chapter 3, paragraph 3.48 Fit and proper requirements Firms must make sure all Senior Managers and people performing Certification Functions (ie people under the Certification Regime) are fit and proper to perform their role. This must be done on appointment and at least once a year. All insurers Chapter 5 Handover procedures A firm must take all reasonable steps to make sure a new Senior Manager has the information/materials they need to do their job. Solvency II Firms and Large NDFs only
Chapter 3,
paragraph 3.80
Individual
Conduct Rules
These are basic standards of behaviour that people performing financial services activities in firms are expected to meet. Firms need to train their staff on the conduct rules and how they apply to them. Firms will need to report breaches of Conduct Rules resulting in disciplinary action to us every year. All insurers Chapter 6, paragraph 6.8 Other Overall Responsibility Function A Senior Management Function that applies where a senior executive is the most senior person responsible for an area of the firm’s business but they do not perform any other Senior Manager Function. Solvency II Firms and Large NDFs only
Chapter 3,
paragraph 3.17
Overall
Responsibility
A requirement for every area, activity and management function of the firm to have a Senior Manager with Overall Responsibility for it. This should be limited to regulated and unregulated financial services activities only. Solvency II Firms and Large NDFs only
Chapter 3,
paragraph 3.17
Prescribed
Responsibilities
FCA-defined responsibilities that must be allocated to an appropriate Senior Manager. All insurers, except EEA branches
Chapter 3,
paragraph 3.54

CP17/26
Chapter 2
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers Term Description Who does it apply to? Where can I read more? Regulatory references Information that firms need to share with each other when an employee or director moves from one firm to another (candidates for Senior Manager Functions, Non-Executive Directors and Certification Functions). All insurers Chapter 5, paragraph 5.12 Responsibilities Maps A document setting out a firm’s governance and management arrangements, and how responsibilities are allocated to individuals within the firm. Solvency II Firms and Large NDFs only
Chapter 3,
paragraph 3.75
Senior
Management
Functions
The roles where the people doing them need to be approved by the FCA. These are defined in our Handbook. All insurers Chapter 3, paragraph 3.12 Senior Manager Conduct Rules These are additional Conduct Rules that apply to all Senior Managers. Firms need to train Senior Managers so they understand what the Conduct Rules are and how they apply to them. Firms will need to report breaches of all Individual and Senior Manager Conduct Rules by Senior Managers resulting in disciplinary action to us within 7 days. All insurers Chapter 6, paragraph 6.8 Senior Managers The people who perform a Senior Management Function. These people need to be approved by the FCA. All insurers Chapter 3, paragraph 3.4 Senior Managers Regime This includes Senior Management Functions, Statements of Responsibilities, Duty of Responsibility, Fit and Proper, Conduct Rules, Prescribed Responsibilities, Regulatory References and criminal records checks. For Solvency II firms (including large Non-Directive Firms), it also includes Responsibilities Maps, handover procedures and Overall Responsibility. All insurers Chapter 3 Statement of Responsibilities A document that every Senior Manager needs to submit with their application for FCA approval, setting out what they are responsible and accountable for. This needs to be kept up to date. Firms should have these documents ready when the SM&CR commences. All insurers Chapter 3, paragraph 3.69

CP17/26
Chapter 3
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers 3 The Senior Managers Regime All firms should read this chapter. Solvency II firms and large NDFs will already have some of these elements in place; some of the proposals are new. If you are a small NDF, paragraphs 3.84 to 3.93 will be particularly relevant. Introduction
3.1 This chapter sets out our proposals for the Senior Managers Regime (SMR) in Solvency
II firms large NDFs and small NDFs. It covers:

who will be a Senior Manager
obligations on firms and Senior Managers, such as the Duty of Responsibility
our powers to apply conditions when we approve Senior Managers
those responsibilities that will normally need to be normally held by a single Senior
Manager (Prescribed Responsibilities)
Statements of Responsibilities and Responsibilities Maps
what firms and individuals need to do under the SMR
3.2 Our proposals for incoming branches and ISPVs are discussed in Chapters 7 and
8 respectively.
3.3 Our proposals for small NDFs are presented in this Chapter in paragraphs
3.84‑3.93 below.
Overview
What is a Senior Management Function
3.4 A Senior Management Function is a new type of controlled function under FSMA. It is
defined in FSMA as ‘in relation to the carrying on of a regulated activity by [a firm], … [a] function [which] will require the person performing it to be responsible for managing one or more aspects of the [firm’s] affairs, so far as relating to the activity, and … those aspects involve, or might involve, a risk of serious consequences … for the [firm], or … for business or other interests in the United Kingdom’.
3.5 We refer to a person who holds a Senior Management Function as a ‘Senior Manager’.
Senior Managers are the most senior people in a firm with the greatest potential to cause harm.
3.6 The FCA decides which roles are Senior Management Functions (as limited by the
description in FSMA). These are in addition to those roles designated by the PRA.

CP17/26
Chapter 3
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers Impact on firm structure and governance
3.7 When we make a role a Senior Management Function, this doesn’t mean a firm needs
to reorganise itself or hire new people to fill these specific roles. If you don’t have anyone doing these jobs, the functions don’t apply. The number and type of Senior Managers a firm has depends on how each firm is organised (this is the same as the Approved Persons Regime). Certain functions are required by other sections of our Handbook so firms should make sure they continue to have people fulfilling these roles where applicable. The SM&CR is not proposing to change this.
3.8 However, later in this section we discuss new responsibilities that should be held by
individual Senior Managers. When considering the proposed Senior Management Functions, firms should also think about the new responsibilities that we expect to be allocated among them.
3.9 The ultimate decision-making body of a firm is its governing body, acting collectively.
Individual accountability under the SM&CR does not undermine this. However, individual Senior Managers have an important part to play in establishing and embedding the right culture and governance within firms, to improve the standard of conduct at all levels.
3.10 Every Senior Manager will need a Statement of Responsibilities, and they will have a
duty of responsibility. These are explained in detail below, but the main purpose of these new tools is to clarify who is responsible for what, and reinforce the personal accountability and responsibility of Senior Managers.
3.11 We will consult separately later this year on how someone who is currently an Approved
Person will transition to being a Senior Manager under the new regime. The same principles of simplicity and proportionality will apply when we consider how to transition firms to the new regime – for example, minimising the need for firms and individuals to apply for new approval as a Senior Manager if they are already an Approved Person. Who will be a Senior Manager in Solvency II firms and large NDFs?
3.12 We propose five executive functions as FCA Senior Management Functions, as set out
in Table 2. The PRA will maintain the Senior Insurance Management Functions (SIMFs) but intend to rename their SIMFs as SMFs. We have provided both the FCA and PRA functions in the table below for completeness.
Table 2: Executive Senior Management Functions
FCA Executive Senior Management Functions (SMFs) SMF3 – Executive Director SMF23b – Conduct Risk Oversight Officer (Lloyd’s only) SMF18 – Other Overall Responsibility SMF16 – Compliance Oversight SMF17 – Money Laundering Reporting Officer PRA Executive functions (for information) Chief Executive

CP17/26
Chapter 3
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers Chief Finance Function Chief Actuarial Function With-Profits Actuary Chief Risk Function Chief Underwriting Function Underwriting Risk Oversight Function Head of Key Business Area Chief Operations Group Entity Senior Manager
3.13 We also propose two Non-Executive roles as Senior Management Functions, the Chair
of the Nominations Committee and the Chair of the With-Profits Committee8 . These roles already exist under the revised APR. Under the SM&CR, only Non-Executive Directors (NEDs) that perform specific roles will be Senior Managers. While this is the same as the approach we took for the revised APR, it is different to the original APR, where we approved all Non-Executive roles. We have listed these new functions in
Table 3, alongside the PRA functions for completeness.
Table 3: Non-Executive Senior Management Functions
FCA Non-Executive Senior Management Functions (SMFs) SMF13 – Chair of Nominations Committee SMF15 – Chair of the With-Profits Committee or the person(s) responsible for the with -profits advisory arrangement PRA Non-Executive functions (for information) Chair Senior Independent Director Chair of Remuneration Committee Chair of Risk Committee Chair of Audit Committee Tell us what you think:
Q1: Does the proposed list of FCA Senior Managers cover the appropriate roles, ie the most senior decision makers within a firm? Q2: Are there any other roles that the FCA should consider specifying as SMFs? Q3: Are there any proposed Senior Managers that the FCA should consider excluding? 8 including the person(s) responsible for the with-profits advisory arrangement.

CP17/26
Chapter 3
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers Introducing a new SMF: the Conduct Risk Oversight Officer (Lloyd’s only)
3.14 The Society of Lloyd’s enables its syndicates to provide specialist insurance and
reinsurance products worldwide, and is regulated by both the FCA and PRA. Lloyd’s oversees the conduct of market participants, mainly through oversight of Managing Agents, but also through supervision of the activities of policyholders and other market stakeholders and service providers.
3.15 Given the size, scale and structurally-unique role of the Society of Lloyd’s, we propose
creating a specific to Lloyd’s FCA Conduct Risk Oversight function. This function will be responsible for overseeing the conduct of business standards required by the Society for the Managing Agents that write business at Lloyd’s. We want to avoid overlap with the responsibility of Managing Agents’ SMFs because these people already have accountability for mitigating conduct of business risks. So this new Conduct Risk Oversight Officer will only be relevant to the Society of Lloyd’s.
3.16 The proposal is consistent with the PRA’s current Underwriting Risk
Oversight function.
Tell us what you think:
Q4: Do you agree with our proposal to introduce a Conduct Risk Oversight Officer for Lloyd’s? Other Overall Responsibility requirement and Other Overall Responsibility function (SMF18)
3.17 We propose applying an Overall Responsibility requirement to all Solvency II firms,9
and large NDFs. This means that these firms will need to ensure that every activity, business area and management function of the firm has a Senior Manager with Overall Responsibility for it. This is to prevent unclear allocation of responsibilities that could result in issues falling between the cracks. Overall Responsibility means a Senior Manager will have primary and direct responsibility for:

briefing and reporting to the governing body about that activity, area or function
putting matters for decision about that activity, area or function to the
governing body
3.18 Having Overall Responsibility doesn’t mean the person needs to have day-to-day
management of that function. Rather they are the most senior person responsible for managing the area overall and they need to be sufficiently senior and credible, and with sufficient resources and authority, to be able to exercise their management and oversight responsibilities effectively.
3.19 The objective of this requirement is not to overlap with the inherent responsibilities
of the Chief Executive’s role. The Chief Executive is the person(s) responsible under the immediate authority of the firm’s governing body for the conduct of the whole of a firm’s business. Instead, the intention is to ensure that it is clear who the governing body of a firm has delegated responsibility to for each area of the firm’s business. 9 other than small run-off firms (see paragraph 3.95), ISPVs (see chapter 8) and EEA branches (see chapter 7)

CP17/26
Chapter 3
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers This could be to the Chief Executive or a member of the executive team. The allocation of responsibilities will differ from one firm to another.
3.20 From applying Overall Responsibility under the banking regime, we know that some
firms found this requirement difficult to understand and implement. So to help insurers understand how this requirement will work in practice, we’ve set out below the steps firms might want to consider:

Firms should consider what activities, business areas and management functions
they have. Firms may find it useful to refer to the general concepts contained in
Annex 1 of SYSC 4 (though SYSC 4 doesn’t apply to insurers) as a starting point
to think about how their own business is organised, but this is not mandatory or exhaustive.
Once a firm has set these out, the next step is to think about who has overall
responsibility at the most senior level for each of these.
The most senior person with Overall Responsibility might be an existing Senior
Manager, such as the Chief Executive, an Executive Director, or the Senior Manager responsible for Compliance Oversight. We expect that this will be the case most of the time.
However, depending on how a firm is organised, the most senior person with Overall
Responsibility for an area might not already be a Senior Manager. In this case, this person will need to be approved by us as a Senior Manager under the Other Overall Responsibility Function.
Where a Senior Manager has Overall Responsibility for an activity, business area
or management function, this will need to be clearly set out in their Statement of Responsibilities and reflected in the Responsibilities Map.
3.21 A firm must ensure that Overall Responsibility is allocated to the most senior person
responsible for a business area. However, where the individual doesn’t hold any other Senior Manager role, they must be approved for the Other Overall Responsibility Function (SMF18).
3.22 Examples of how Overall Responsibility may apply in an insurance firm include:
If an insurer operates via a direct sales force, the individual with Overall Responsibility
for sales may require approval under SMF18, if they’re not already a Senior Manager.
In a life insurer, the person with senior responsibility for legacy life business or
another major business unit may also need approval under SMF18 if they’re not already a Senior Manager.
Individuals with Overall Responsibility of functions such as product pricing (if
separate from underwriting), complaints, claims, IT (including systems to support back office and front office functions) or may also require approval under SMF18 if they’re not already a Senior Manager.
3.23 Insurers may offer new lines of business or expand into new products, meaning
that new business areas, activities and management functions may be created. In those cases, we anticipate that firms should consider their governance structure

CP17/26
Chapter 3
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers carefully and identify the individuals with Overall Responsibility for those newly established functions. Activities the Overall Responsibility rule applies to
3.24 The scope of the Overall Responsibility rule is the same as the scope of the Conduct
Rules. This means it applies to a firm’s regulated and unregulated financial services activities (including any related ancillary activities).10
3.25 Under the Overall Responsibility rule, firms must allocate responsibility to a Senior
Manager for all activities, business areas and management functions of the whole firm, including those carried out from a branch overseas. This includes all transactions that take place overseas (whether in full or in part). Dividing or sharing Overall Responsibility
3.26 It’s not possible to divide an Overall Responsibility because they are specific to how a
firm is structured and the roles of the people running it.
3.27 For example, by analogy, in Annex 1 of SYSC 4, ‘Retail sales’ is listed as a possible
business area of a firm. One firm could have a single retail sales function for several different business lines. Another firm could have separate retail sales functions for each of its different business lines. In each case, the allocation of the Overall Responsibility for the retail sales function(s) of the firm will be different.
3.28 This means if responsibility for retail sales is allocated across a number of Senior
Managers, firms don’t need to apply to us for a waiver to ‘split’ the responsibility between each of the Senior Managers. Firms just need to make sure that each Senior Manager’s Statement of Responsibilities sets out what they are responsible for in a clear and accurate way.
3.29 Allocating Overall Responsibility for the same area or activity to two or more Senior
Managers (‘sharing’) is permitted, where this is appropriate. Tell us what you think:
Q5: Do you agree with the proposed Overall Responsibility SMF? Broadening the scope of the Compliance Oversight function (current CF10)
3.30 Under the revised APR, the Compliance Oversight Function (CF 10) applies to life
insurers regarding compliance with certain parts of the FCA Handbook11 and not more generally (eg the Principles for Business).
3.31 We consider the current scope and definition of the role is too narrow to effectively
cover all FCA requirements, as well as directly applicable EU legislation for which FCA is responsible.
3.32 Therefore, we propose that the Compliance Oversight Function will cover all insurers
for all requirements of the regulatory system for which FCA is responsible, ie all FCA 10 Under our current rules for overall responsibility that apply to banks, building societies, credit unions and PRA-designated investment firms, this includes the legal function. However, this policy is under review following industry feedback (see Discussion Paper 16/4:
Overall responsibility and the legal function).
11 COBS, CASS, COLL

CP17/26
Chapter 3
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers rule requirements as well as any directly applicable legislation or provisions where the FCA may have responsibility for ensuring compliance. Tell us what you think:
Q6: Do you agree with our proposal to extend the scope and definition of SMF16 to cover all FCA requirements? Extending the Chair of the With-Profits Committee function (current CF2b)
3.33 When we revised the APR for insurers, we introduced a new Controlled Function,
the Chair of the With-Profits Committee (CF2b), to ensure the fair treatment of with‑profits fund policy holders.
3.34 We believe that this function meets the definition of an SMF as this role gives
significant advice to the management body of the firm on with-profits matters. Therefore, we propose making the Chair of the With-Profits Committee a Senior Manager.
3.35 The FCA’s Conduct of Business Sourcebook (COBS)12 allows firms to use a with‑profits
advisory arrangement instead of a With-Profits Committee. However, we don’t currently require any person in this arrangement to be approved. Given this structure poses similar risks to the With-Profits Committee structure, we are proposing to also capture this function as part of the definition of Chair of the With-Profits Committee. Tell us what you think:
Q7: Do you agree with our proposal to extend the Chair of the With-Profits Committee to cover any person(s) performing the with-profits advisory arrangement? Holding more than one Senior Management Function
3.36 Where someone intends to hold more than one FCA Senior Management Function,
the person will need to apply for approval from us for each function (this can be done at the same time and using the same form for both functions). They will only need one Statement of Responsibilities, but this must clearly describe all of their responsibilities.
3.37 There may be cases where a Senior Manager is applying to perform a PRA and FCA
Senior Management Function at the same time. In this case, an ‘overlap rule’ will be applied. For example, someone could be a Chief Finance Officer (CFO) who is also appointed to the Board. Acting as a CFO is a PRA SMF, and being an Executive Director is an FCA SMF. However, firms don’t need to seek separate approval from both the FCA and the PRA in this situation. Instead, people apply just once to the PRA, and the overlap rule ensures the approval covers both roles. We work closely with the PRA on these applications to ensure FCA issues are considered fully.
3.38 Also, there may be cases where a Senior Manager is appointed to perform a
PRA Senior Manager role, for example Chief Risk Officer and the same person is later appointed as an Executive Director in addition to their existing role. Where this 12 www.handbook.fca.org.uk/handbook/COBS/20/5.html

CP17/26
Chapter 3
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers happens, the firm needs to apply to the FCA for the person to be approved for their new responsibilities – but this won’t affect their existing approval from the PRA. The person will only need one Statement of Responsibilities but it must clearly describe all of their responsibilities under both functions. The 12-week rule
3.39 Currently, the revised APR and the Senior Managers Regime allow someone to cover
for an Approved Person or a Senior Manager without being approved, where the absence is temporary or reasonably unforeseen, and the appointment is for less than 12 consecutive weeks.
3.40 We propose extending this rule so it also applies to responsibilities under the ‘Overall
Responsibility’ requirement (explained in paragraph 3.17). For example, if the person approved to perform the Chief Operations Function becomes unwell and they’re also the person with Overall Responsibility for the complaints-handling process, the 12-week rule allows the firm for a maximum of 12 weeks to:

appoint a person to perform the Chief Operations Function without the new
appointment being approved
reallocate the responsibility for the complaints-handling process to the same
person, or a different person, without them being approved Tell us what you think:
Q8: Do you agree with our proposal to extend the 12-week rule to apply to responsibilities under the ‘Overall Responsibility’ requirement? If not, please explain why. Applying conditions when approving Senior Managers
3.41 FSMA granted the FCA new powers to apply conditions and time limits when approving
Senior Managers. We can only use these powers if we think it’s desirable to do so to advance our statutory objectives.
3.42 FSMA also requires us to publish a statement of our policy for these new powers, which
is set out in SUP10C of our Handbook.
3.43 We will now be able to:
approve a Senior Manager, but make this subject to conditions
approve a Senior Manager for a limited time only
change existing approvals, including imposing, changing or removing conditions or
time limits

CP17/26
Chapter 3
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers
3.44 An example of where time-limited approval may apply might be where a firm needs
to appoint a candidate on an interim basis while seeking a permanent candidate for a particular function.
3.45 Circumstances where the FCA may consider imposing, changing or removing
conditions might include examples where approval is linked to required remedial actions to be undertaken by the firm. Senior Managers overseas
3.46 There is no territorial limitation on the Senior Managers Regime. This means that the
Senior Managers Regime will apply to anyone who performs a Senior Manager role, whether they are based in the UK or overseas.
3.47 The Senior Management Functions for incoming branches of overseas firms are set
out in paragraphs 7.4 and 7.15.
Duty of responsibility
3.48 Every Senior Manager will have a duty of responsibility13. This means that if a firm
breaches one of our requirements, the Senior Manager responsible for that area could be held accountable if they did not take ‘reasonable steps’ to prevent or stop the breach.
3.49 The burden of proof lies with the FCA to show that the Senior Manager did not take
the steps a person in their position could reasonably be expected to take to avoid the firm’s breach occurring (or continuing).
3.50 When deciding whether to take action against someone based on the duty of
responsibility, we will look at all the circumstances of the case including the seriousness of the breach, the person’s position, responsibilities and seniority, and the need to use enforcement powers effectively and proportionately. These criteria are published in the Decision and Procedure and Penalties Manual (DEPP).
3.51 Sometimes it will be appropriate to take action against a Senior Manager, sometimes
against a firm, and sometimes against both. These decisions are made on a case-bycase basis, applying the criteria set out in DEPP.
3.52 In bringing enforcement action against Senior Managers – whether under the
duty of responsibility, the Conduct Rules or otherwise – we will consider the individual’s Statement of Responsibilities when determining the extent of the Senior Manager’s responsibilities.
3.53 We’ve published final guidance on enforcing the duty of responsibility in banks.14
We expect that this guidance will also apply to insurers, but will formally consult on this as part of the technical Consultation Paper later this year. 13 This is derived directly from FSMA, rather than our rules (see s. 66A(5)(d) FSMA). 14 www.fca.org.uk/publication/policy/ps17-09.pdf

CP17/26
Chapter 3
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers Prescribed Responsibilities What is a Prescribed Responsibility?
3.54 Prescribed Responsibilities are specific responsibilities that we define in our Handbook
that a firm must give to a Senior Manager.
3.55 The PRA has already introduced Prescribed Responsibilities (PRs) as part of the SIMR.
We now propose introducing some additional FCA PRs.
3.56 Table 4 below presents the PRs specified by both the FCA and PRA.
Table 4: PRs for Solvency II firms & Large NDFs
Handbook
PRs
Reference
PRA, FCA or shared Prescribed Responsibilities A Shared Senior Management Regime B Shared Employee Certification Regime C Shared Responsibilities Map F Shared Induction, training and professional development of all members of the firm's governing body G Shared Induction, training and professional development of all persons performing designated senior management functions on behalf of the firm other than members of the governing body and key function holders J-2 Shared Oversight of Internal Audit (IA) at firms that outsource their IA to a third party N Shared Whistleblowing15 B-1 FCA Responsibility for the firm’s performance of its obligations under the Code of Conduct (COCON) (in terms of training and regulatory reporting) D FCA For the firm’s policies and procedures for countering the risk that the firm might be used to further financial crime Z FCA Compliance with CASS H PRA Overseeing the adoption of the firm's culture I PRA Leading the development of the firm's culture by the governing body as a whole M-1 PRA Remuneration policies and practices O PRA Management of the allocation and maintenance of the firm’s capital and liquidity Q PRA Production and integrity of the firm's financials and its regulatory reporting T PRA Development and maintenance of the firm's business model by the governing body T-2 PRA Performance of the firm's Own Risk and Solvency assessment (ORSA) 15 The whistleblowers’ champion’s allocated responsibilities are set out in SYSC 18.4.4R. This responsibility does not apply to a firm that is not required to have a whistleblowers’ champion

CP17/26
Chapter 3
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers Handbook PRs Reference PRA, FCA or shared Prescribed Responsibilities U PRA Insurance Fitness and Propriety X PRA Outsourced operational functions including systems and technology Our proposed approach to Prescribed Responsibilities
3.57 The Senior Manager allocated a Prescribed Responsibility should be the most
senior person responsible for that area in the firm. The PR must be allocated clearly and should normally be held by a single individual, except where a firm can show that dividing or sharing a responsibility is appropriate and justifiable (see paragraphs 3.66‑3.68).
3.58 With the exception of the CASS responsibility, PRs cannot be allocated to individuals
approved under SMF18 (Other Overall Responsibility Function).
3.59 If a firm moves a PR from one Senior Manager to another, the relevant Senior
Managers’ Statements of Responsibilities will need to be updated to reflect these changes. However, simply re-allocating Prescribed Responsibilities won’t require approval.
3.60 The FCA and PRA propose 19 PRs in total. Of these 19 PRs:

seven are shared between the PRA and the FCA
nine have been allocated by the PRA only
three are FCA only
3.61 The seven shared PRs in Table 4 indicate areas where both regulators have an
interest in how these responsibilities are being discharged. We expect each of these responsibilities to be allocated to one SMF.
3.62 The nine PRA PRs are primarily focused on the PRA’s objectives for prudential
soundness of firms. For example, the PRs on ‘overseeing the adoption of the firm’s culture’ and ‘leading the development of the firm’s culture by the governing body as a whole’ were introduced by the PRA under the SIMR and have a prudential focus. We view such responsibilities broadly and we think that the whole firm, from the governing body down, is responsible for these. Therefore, we have not introduced an equivalent PR for one individual.
3.63 We propose to have three FCA-only PRs:
a new PR for the firm’s performance of its obligations under the Code of Conduct
(COCON), to ensure the firm trains its staff in the Conduct Rules and complies with the FCA notification requirements
a CASS PR (although this is only applicable where there is an underlying obligation on
the firm to comply with these rules)
a PR for preventing Financial Crime
Prescribed Responsibilities
What is a Prescribed Responsibility?
3.54 Prescribed Responsibilities are specific responsibilities that we define in our Handbook
that a firm must give to a Senior Manager.
3.55 The PRA has already introduced Prescribed Responsibilities (PRs) as part of the SIMR.
We now propose introducing some additional FCA PRs.
3.56 Table 4 below presents the PRs specified by both the FCA and PRA.
Table 4: PRs for Solvency II firms & Large NDFs
Handbook
PRs
Reference
PRA, FCA or shared Prescribed Responsibilities A Shared Senior Management Regime B Shared Employee Certification Regime C Shared Responsibilities Map F Shared Induction, training and professional development of all members of the firm's governing body G Shared Induction, training and professional development of all persons performing designated senior management functions on behalf of the firm other than members of the governing body and key function holders J-2 Shared Oversight of Internal Audit (IA) at firms that outsource their IA to a third party N Shared Whistleblowing15 B-1 FCA Responsibility for the firm’s performance of its obligations under the Code of Conduct (COCON) (in terms of training and regulatory reporting) D FCA For the firm’s policies and procedures for countering the risk that the firm might be used to further financial crime Z FCA Compliance with CASS H PRA Overseeing the adoption of the firm's culture I PRA Leading the development of the firm's culture by the governing body as a whole M-1 PRA Remuneration policies and practices O PRA Management of the allocation and maintenance of the firm’s capital and liquidity Q PRA Production and integrity of the firm's financials and its regulatory reporting T PRA Development and maintenance of the firm's business model by the governing body T-2 PRA Performance of the firm's Own Risk and Solvency assessment (ORSA) 15 The whistleblowers’ champion’s allocated responsibilities are set out in SYSC 18.4.4R. This responsibility does not apply to a firm that is not required to have a whistleblowers’ champion

CP17/26
Chapter 3
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers
3.64 When allocating PRs, firms will need to think about who in practice is the most senior
person responsible. For example, if the Money Laundering Reporting Officer Senior Manager reports to a more senior individual with responsibility for financial crime matters more generally, the PR for financial crime should be allocated to this person and not the Money Laundering Reporting Officer.
3.65 In paragraph 4.23 we explain how the CASS Prescribed Responsibility interacts with the
CASS Oversight Function in the Certification Regime.
Dividing and sharing a Prescribed Responsibility
3.66 Each Prescribed Responsibility should normally be held by only one person. Firms will
only be able to divide or share a Prescribed Responsibility in limited circumstances and where they can show that this is appropriate and justifiable. ‘Dividing’ a responsibility means several Senior Managers have responsibility for separate parts of one Prescribed Responsibility. ‘Sharing’ a responsibility means several Senior Managers are jointly responsible for all of a Prescribed Responsibility.
3.67 If a firm divides or shares a Prescribed Responsibility, they will need to show why this is
justified and confirm that this does not leave a gap. For example, it would be justified to share a function or responsibility as part of a job share, where departing and incoming Senior Managers work together temporarily as part of a handover, or where a particular area of a firm is run by two Senior Managers.
3.68 Where responsibilities are shared or divided, this will need to be clearly explained in the
relevant Statements of Responsibilities. In general, where responsibilities are shared, each Senior Manager will be jointly accountable for those responsibilities. Tell us what you think:
Q9: Do you agree with our approach to Prescribed Responsibilities and our proposed list of PRs? Q10: Do you agree with our approach to dividing and sharing Prescribed Responsibilities? Statements of Responsibilities
3.69 A Statement of Responsibilities (SOR) is a document that every Senior Manager will
need to have, clearly setting out their role and what they are responsible for. This is required under FSMA.
3.70 Currently, insurers must maintain, and provide on request, a Scope of Responsibilities
document which is the same in substance as a Statement of Responsibilities document. Solvency II firms must keep records of their scope of responsibilities

CP17/26
Chapter 3
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers documents for 10 years. Large and small NDFs are required to keep records for six years.
3.71 We propose re-naming Scope of Responsibilities documents to ‘Statements of
Responsibilities’ to be consistent with the new legislation and reduce confusion by having different names for the same document.
3.72 To apply the legislation’s requirements, we will:

require insurers to submit SORs with an approval application for a new Senior
Manager and then maintain and update them
require insurers to update and re-submit them whenever there is a significant
change in responsibilities
3.73 We have existing guidance in SUP10C of our Handbook setting out examples of what
might be a significant change in responsibilities. This includes where a Senior Manager has a Prescribed Responsibility added or removed from their responsibilities, or where there is a change to how responsibilities are shared between Senior Managers.
3.74 We will consult later this year on the template for Statements of Responsibilities and
the process for submitting them to us.
Tell us what you think:
Q11: Do you agree with our proposals on Statements of Responsibilities? Responsibilities Maps
3.75 Currently, Solvency II firms and large NDFs must prepare and maintain an up-to-date
‘governance map’ that covers all Senior Managers and Key Function Holders (under the PRA SIMR), as well as all senior individuals of interest to the FCA. Firms must provide a map if requested by the FCA and must keep records of those for 10 years.
3.76 We propose replacing this governance map with a ‘Responsibilities Map’ – a single
document that sets out the firm’s management and governance arrangements. This includes, for example, how the Prescribed Responsibilities have been allocated, details on who has Overall Responsibility for the firm’s activities, business areas and management functions, details of individuals’ and committees’ reporting lines, and how any responsibilities are shared or divided between different people.
3.77 Responsibilities Maps are designed to give a collective view of the allocation of
responsibilities across a firm and demonstrate that the Senior Managers’ Statements of Responsibilities don’t leave any gaps. They also help us to identify who to speak to about particular issues and who is accountable if something goes wrong.
3.78 Responsibilities Maps must be kept up to date on an ongoing basis and must also be
submitted alongside any application for approval that is sent to the FCA. This does not present duplication with PRA’s requirements. We expect firms will submit the same

CP17/26
Chapter 3
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers responsibilities maps documents to both us and the PRA, depending on the role that they are seeking approval for.
3.79 These requirements won’t apply to small NDFs, small run-off firms and ISPVs.
However, (as currently happens) these firms will need to continue to keep up-to-date records of apportionment of responsibilities in line with the requirements in SYSC 2. Tell us what you think:
Q12: Do you agree with our proposal to require firms to maintain, produce and, where relevant, submit Responsibilities Maps? Handover procedures
3.80 We propose introducing a requirement for all Solvency II firms and large NDFs to take
all reasonable steps to ensure that a person taking on a Senior Manager role has all the information and materials they could reasonably expect to have in order to do their job effectively. One way of doing this could be for the predecessor to prepare a suitable handover note.
3.81 In addition, a firm must have a policy in place explaining how it complies with this
requirement, and maintain adequate records of the steps it has taken. Tell us what you think:
Q13: Do you agree with our proposal to apply handover requirements to Solvency II firms and large NDFs? If not, please explain why. Outsourcing under the Senior Managers Regime
3.82 Where a firm relies on a third party for the performance of operational functions of
the firm, it remains fully responsible for discharging all of its obligations under the regulatory system. This means that while firms may outsource the function, they cannot outsource the responsibility for this function.
3.83 For example, when an insurer decides to outsource its internal audit or claims handling
functions to third parties, they will be required to explain clearly how responsibility for oversight of these outsourced functions is allocated among its Senior Managers within the firm. In addition, firms will need to continue to take into account the outsourcing guidance in SYSC 13, and any requirements in the directly applicable EU Regulation.

CP17/26
Chapter 3
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers How does the SMR apply to Small Non-Directive Firms? Introduction
3.84 This section sets out our proposals for the application of the SMR to small
Non‑Directive Firms (‘small NDFs’). Small NDFs are those insurance firms that are out of scope of the Solvency II Directive and hold assets of £25 million or less.
3.85 There are about 75 UK insurance firms that classify as small NDFs. Most of these firms
are mutual insurers, and many of them are registered as friendly societies. Overview
3.86 Under current rules, small NDFs are subject to a streamlined regime.16 This can be
summarised as follows:

a shorter list of roles requiring approval (including PRA roles)17
a shorter list of Prescribed Responsibilities under the PRA’s SIMR
more time to prepare scope of responsibilities documents
no requirement for a governance map
a shorter mandatory record-keeping period for the scope of responsibilities
Our proposals
3.87 We believe that the regime for small NDFs should remain proportionate and that
the above principles should be maintained. We recognise that these firms typically undertake less complex activities and therefore their business models and governance arrangements are less complex.
3.88 Table 5 shows the SMFs we propose introducing alongside the PRA’s functions.
Table 5: Proposed Senior Management Functions in small NDFs
FCA Senior Management Functions
SMF3 – Executive Director
SMF27 – Partner
SMF23b – Compliance Oversight
SMF17 – Money Laundering Reporting Officer PRA functions (for information) Small Insurer Senior Management Function [includes CF1, CF2 and CF3] Small Insurer Chief Actuary Function Small Insurer With-Profits Actuary Function 16 www.fca.org.uk/publication/consultation/cp15-15.pdf www.fca.org.uk/publication/policy/ps15-31.pdf www.fca.org.uk/publication/consultation/cp15-25.pdf 17 PRA SIMF 25: Small Insurer Senior Manager, PRA SIMF20: Small Insurer Chief Actuary, PRA SIMF 21: Small Insurer With‑Profits Actuary, FCA CF1: director, FCA CF3: CEO, FCA CF5: director of unincorporated association and FCA CF6: Small friendly society function.

CP17/26
Chapter 3
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers
3.89 We propose not to apply the ‘Overall Responsibility’ requirements and SMF 18
(‘Other Overall Responsibility’ function), as we don’t consider these are necessary for small NDFs. Also, we propose to not require approval for the Chair of the Nominations Committee and the Chair of the With-Profits Committee. Our proposal doesn’t prevent such firms establishing these committees; however we believe this is a proportionate approach that still ensures effective governance and clear accountability.
3.90 To simplify our rules, we propose renaming the current FCA controlled functions CF1,
CF5 and CF6 as ‘SMF3’ (Executive Director).
3.91 We also propose applying a shorter list of Prescribed Responsibilities:
Table 6: Proposed Prescribed Responsibilities (PRs) in small NDFs
Handbook
PRs Ref
FCA, PRA or shared Prescribed Responsibilities A Shared Performance by the firm of its obligations under the Senior Managers Regime, including implementation and oversight B Shared Performance by the firm of its obligations under the Certification Regime B-1 FCA Responsibility for the firm’s performance of its obligations under the Code of Conduct (COCON) (in terms of training and regulatory reporting) D FCA Overall Responsibility for the firm’s policies and procedures for countering the risk that the firm might be used to further financial crime Z FCA Overall Responsibility for the firm’s compliance with CASS T-1 PRA Providing the governing body with an up-to-date business plan and all relevant MI AA PRA Oversight of systems and controls, along with risk-management policies and procedures, that are proportionate to the nature, scale and complexity of the risks inherent in the firm's business model CC PRA Management of the firm's financial resources DD PRA Ensuring the governing body is kept informed of its legal and regulatory obligations
3.92 Statements of Responsibilities are a FSMA requirement and will apply to small
NDFs. Small NDFs will have already produced scope of responsibilities document, so the key change is that these documents need to be submitted alongside any approval application.
3.93 We propose to treat small run – off firms similarly to small NDFs, which means that
our proposals for small NDFs presented in the Small NDFs section above will apply to these firms.

CP17/26
Chapter 3
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers How does the SMR apply to small run-off firms?
3.94 The PRA published its feedback18 to its Consultation Paper CP34/16 ‘Strengthening
individual accountability in banking and insurance: amendments and optimisations’. PRA previously consulted on SIMR optimisations for SII firms in run – off that no longer have regulatory permissions to write new business.
3.95 Table 7 shows the SMFs we propose introducing alongside the PRA’s functions.
Table 7: Proposed Senior Management Functions in small run – off firms
FCA Senior Management Functions
SMF3 – Executive Director
SMF27 – Partner
SMF16 – Compliance Oversight
SMF17 – Money Laundering Reporting Officer PRA functions (for information) Head of small run – off firm or Chief Executive Function Chief Finance Function With-Profits Actuary Function
3.96 Table 8 shows the PRs we propose introducing:
Table 8: Proposed Prescribed Responsibilities in small run – off firms
Handbook
PRs Ref
FCA, PRA or shared Prescribed Responsibilities A Shared Performance by the firm of its obligations under the Senior Managers Regime, including implementation and oversight B Shared Performance by the firm of its obligations under the Certification Regime B-1 FCA Responsibility for the firm’s performance of its obligations under the Code of Conduct (COCON) (in terms of training and regulatory reporting) D FCA Overall Responsibility for the firm’s policies and procedures for countering the risk that the firm might be used to further financial crime Z FCA Overall Responsibility for the firm’s compliance with CASS T-1 PRA Providing the governing body with an up-to-date business plan and all relevant MI AA PRA Oversight of systems and controls, along with risk-management policies and procedures, that are proportionate to the nature, scale and complexity of the risks inherent in the firm's business model CC PRA Management of the firm's financial resources DD PRA Ensuring the governing body is kept informed of its legal and regulatory obligations 18 www.bankofengland.co.uk/pra/Documents/publications/ps/2017/ps1217.pdf

CP17/26
Chapter 3
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers Tell us what you think:
Q14: Do you agree with our proposals for small NDFs?
Q15: Do you agree with our proposals for small run-off firms? Recap What firms need to do under the Senior Managers Regime If a person will be performing a Senior Manager Function, the firm will need to:

satisfy themselves that the candidate is fit and proper19 (see Chapter 5) to perform the
relevant function
work out whether there is an overlap20 with a PRA SMF and if not, apply for the person to be approved
by us before they start their role
if there is an overlap, then firms don’t need to seek separate approval from the FCA. They will just
require PRA’s approval in this situation
send us a Statement of Responsibilities and Responsibilities Map (if applicable) with each application
for approval
After a Senior Manager has been approved, the firm will need to:
update Statements of Responsibilities and Responsibilities Maps and resubmit the Statements of
Responsibilities to us whenever there is a significant change to a Senior Manager’s responsibilities
assess that their Senior Managers are fit and proper to carry out their job at least once a year
Also, firms will need to make sure they have appropriately allocated all of the relevant Prescribed Responsibilities and Overall Responsibility (where applicable) to their Senior Managers. What Senior Managers need to do
Any person who is a Senior Manager will have a ‘duty of responsibility’21.
Senior Managers must ensure that their Statements of Responsibilities are accurate and up to date.
There are also Conduct Rules that apply to Senior Managers. We explain these in Chapter 6. Senior
Managers will need to understand and comply with these rules. 19 As described in FIT 1.2.1B. 20 See FSMA s66A(5)(d). 21 Senior Managers should understand what this means in the context of their job.

CP17/26
Chapter 4
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers 4 Certification Regime All firms should read this chapter, as the Certification Regime applies to all insurers. Introduction
4.1 This chapter sets out our proposals for the Certification Regime, which will apply to all
insurers. In particular, it sets out:

what functions will be under the Certification Regime
what firms will need to do under the Certification Regime
Overview
4.2 The Certification Regime is a new FSMA requirement for all firms. This is one of the
biggest changes for insurers compared to the current SIMR and revised APR.
4.3 It applies to people who perform certain functions, known as Certification Functions,
but who are not Senior Managers. FSMA defines a Certification Function22 as one that ‘requires the person performing it to be involved in one or more aspects of the firm's affairs, so far as relating to a regulated activity, and … those aspects involve, or might involve, a risk of significant harm to the firm or any of its customers’.
4.4 We set out the functions that we consider to meet the FSMA definition, which we list
in our Handbook. Once we decide that a role is a Certification Function, firms need to make sure that anyone doing that role is fit and proper to do the job, and issue them with a certificate stating this. This needs to be renewed at least once a year. This is referred to as the ‘Certification Regime’.
4.5 Some of the staff in scope of the Certification Regime may have been previously
approved by us. We will not approve these people any more, as one objective of the Certification Regime is to reinforce that firms, rather than the regulator, are responsible for ensuring their staff are fit and proper. This also means that the people under the Certification regime won’t appear on the FCA public register.
4.6 We are proposing to apply the same list of Certification functions to all firms. However
we recognise that some of the functions already in place for banks (such as algorithmic trading and proprietary trading) are unlikely to apply in practice to insurers. In small firms, it is possible that there will be no one in the Certification Regime if there is only a handful of senior individuals (who will be Senior Managers) supported by administrative staff. 22 In the definition of ‘significant harm function’ in s63E(5) of FSMA. Recap What firms need to do under the Senior Managers Regime If a person will be performing a Senior Manager Function, the firm will need to:
satisfy themselves that the candidate is fit and proper19 (see Chapter 5) to perform the
relevant function
work out whether there is an overlap20 with a PRA SMF and if not, apply for the person to be approved
by us before they start their role
if there is an overlap, then firms don’t need to seek separate approval from the FCA. They will just
require PRA’s approval in this situation
send us a Statement of Responsibilities and Responsibilities Map (if applicable) with each application
for approval
After a Senior Manager has been approved, the firm will need to:
update Statements of Responsibilities and Responsibilities Maps and resubmit the Statements of
Responsibilities to us whenever there is a significant change to a Senior Manager’s responsibilities
assess that their Senior Managers are fit and proper to carry out their job at least once a year
Also, firms will need to make sure they have appropriately allocated all of the relevant Prescribed Responsibilities and Overall Responsibility (where applicable) to their Senior Managers. What Senior Managers need to do
Any person who is a Senior Manager will have a ‘duty of responsibility’21.
Senior Managers must ensure that their Statements of Responsibilities are accurate and up to date.
There are also Conduct Rules that apply to Senior Managers. We explain these in Chapter 6. Senior
Managers will need to understand and comply with these rules. 19 As described in FIT 1.2.1B. 20 See FSMA s66A(5)(d). 21 Senior Managers should understand what this means in the context of their job.

CP17/26
Chapter 4
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers Certification Functions
4.7 We propose making the following roles Certification Functions, building on some of the
existing roles in the revised APR. These will apply to all FSMA-authorised firms.
4.8 Please note that the Certification Regime only applies to employees23 of firms. It does
not apply to Non-Executive Directors, for example.
Table 9: Proposed Certification Functions
Significant management function
(based on current CF29)
These individuals perform functions that would have been Significant Influence Functions under our Approved Persons Regime. These roles are important individuals who can seriously impact the way the firm conducts its business. The significant management function is described in more detail in paragraph 4.11. Functions that are subject to qualification requirements These are set out in our Training and Competence Sourcebook24. For example, life insurers should identify individuals:

advising on long-term care insurance contracts
overseeing administrative functions for insurance contracts that are life
policies and for pension schemes
giving advice or performing activities related to pension transfers
(current CF30s)
Anyone who supervises or manages a Certified Person (directly or indirectly), but isn’t a Senior Manager This will ensure that people who supervise certified employees are held to the same standard of accountability. It also ensures a clear chain of accountability between junior certified employees and the Senior Manager ultimately responsible for that area. In practice, it means that if a firm employs a customer-facing financial adviser, for example, every manager above them in the same chain of responsibility will have to be certified (until the Senior Manager approved under the SMR is reached). Material Risk Takers For dual-regulated insurers, these individuals are those that Solvency II firms already need to identify under Solvency II regulations on remuneration. Solvency II firms need to identify those individuals whose professional activities have a material impact on the firm’s risk profile. We don’t propose to extend this Certification Function to firms not currently subject to the Solvency II requirements on remuneration. The client dealing function (based on the relevant elements of the current CF30 function) This function will be expanded from the current CF30 function to apply to any person dealing with clients, including retail and professional clients and eligible counterparties. This will cover people who:
advise on investments other than a non-investment insurance contract
and perform other functions related to this, such as dealing and arranging
deal, as principal or agent, and arrange (bring about) deals in investments
act in the capacity of an investment manager and the functions
connected with this
act as a bidder’s representative.
Proprietary traders
(current CF29)
These individuals perform functions that would have been Significant Influence Functions under our Approved Persons Regime. These important roles can seriously impact the way the firm conducts its business. CASS Oversight function (current CF10a) 23 As per the definition of ‘employee’ in section 64A(6) of FSMA. 24 www.handbook.fca.org.uk/handbook/TC/

CP17/26
Chapter 4
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers
Table 9: Proposed Certification Functions
Algorithmic trading This function includes people with responsibility for:

approving the deployment of a trading algorithm or a material part of one
approving the deployment of a material amendment to a trading algorithm
or a material part of one, or the combination of trading algorithms
monitoring or deciding whether or not the use or deployment of a trading
algorithm is or remains compliant with the firm’s obligations These roles are unlikely to apply to most insurance firms.
4.9 The PRA is proposing a slightly different set of Certification Functions, although the
two do not conflict:
all Key Function Holders (KFHs)25 for all Solvency II insurers and large NDFs along with
Insurance Special Purpose Vehicles
Material Risk Takers (MRTs)26 – this will only apply to large27 Solvency II insurers and
large NDFs
individuals who are managing a Material Risk Taker
4.10 The set of Certification Functions specified by the FCA is wider than those specified
by the PRA. This is to reflect the different statutory objectives of the two regulators, and recognises that there is a wider set of functions within insurers that might pose significant risks to the FCA’s statutory objectives. Significant Management Certification Function
4.11 We propose that the Significant Management Certification Function applies to
someone with ‘significant responsibility for a significant business unit’. By this we mean people below Senior Managers who are responsible for business units that, on account of their size, nature or impact, are considered ‘significant’ by the firm.
4.12 The intention of the Significant Management Function is to provide broad coverage
of a firm’s main activities below the Senior Manager layer. Firms will need to decide whether a business unit is ‘significant’. We have set out factors in our Handbook for firms to consider, including:
the size and significance of the firm’s business in the UK
the risk profile of the unit
the unit’s contribution to the firm’s capital requirements
its contribution to the profit and loss account
the number of employees, Certification Functions or Senior Managers in the unit
the number of customers served by the unit
25 Individuals who are responsible for a ‘key function’ at Solvency II insurers, ie risk, actuarial, Internal Audit, Compliance and Finance. 26 Those ‘employees’ of an insurer whose professional activities have a material impact on the firm’s risk profile as per the Solvency II remuneration requirements. 27 The PRA define ‘large’ as a firm with premium income of more than £1bn in each of the last three years, or with assets of more than £10bn at the end of the last three years.

CP17/26
Chapter 4
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers
4.13 For example, we expect that most insurers in the general insurance or life sector have
complaints-handling business units that may be significant according to the factors listed above. Similarly, we consider underwriting to be one of the most significant business units in insurers in any sector. As a result, we would generally expect that the people below the Senior Managers layer responsible for these functions will be certified.
4.14 A business unit isn’t limited to one that carries on commercial activities with
customers and third parties or that generates revenue. A business unit can also be an internal support department (for example, human resources, operations or information technology).
4.15 We have set out some further guidance in the Handbook on the factors that insurers
should consider, as well as some examples of business units that may be significant. However, the examples are only guidance to prompt firms to think about how the function applies to their activities, and we do not require firms to organise themselves in this way. Additionally, some of the examples may not apply to all firms. Tell us what you think:
Q16: Do you agree with the functions we have proposed making Certification Functions? Q17: Are there any other functions that we should make a Certification Function?
4.16 We also note that there have been some preliminary concerns raised with us about the
fact that people performing Certification Functions will not appear on a public register. We invite feedback on these concerns. Q18: Do you think the identity of people performing Certification Functions should be made public by firms? If so, which Certification Functions should be made public? Performing more than one Certification Function
4.17 If someone performs more than one Certification Function, a firm needs to certify
that the individual is fit and proper to carry out each function. For example, someone might carry out a function requiring a qualification, and also carry out the Significant Management Function. There might be different competencies required for the different functions, so firms need to assess that the person is fit and proper to do each role (but this can be done as part of a single assessment process).
4.18 If a Senior Manager also performs a Certification Function that is closely linked to their
role as a Senior Manager, then they won’t need to be certified under the Certification Regime (see 4.23 for an example in relation to CASS). However, if they are performing a Certification Function that is very different to the activity they are performing as a Senior Manager, they will also need to be certified. We expect that this will not be common in practice. Overseas employees
4.19 For UK firms, the Certification Regime is limited to people performing a Certification
Function who are either based in the UK or, if based outside the UK, have contact with UK clients. We call this the territorial limitation.

CP17/26
Chapter 4
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers
4.20 This means that if a person based overseas does not deal with UK clients, but
would otherwise have been carrying out one of the functions listed in Table 7, the Certification Regime will not apply to them. However, there will still be a Senior Manager who is responsible for the Certification Regime (through the Prescribed Responsibility).
4.21 The exception to this is where a person is a material risk taker under Solvency II
regulations on remuneration. For these individuals, there is no territorial limitation. This means that if a person is a material risk taker, the Certification Regime will apply even if they are based overseas and do not deal with a UK client.
4.22 The flow chart below sets this out:
Yes
Is the employee a Material Risk Taker?
Captured by the
Certifi cation Regime Yes
Is the employee performing any other Signifi cant Harm Function? Not captured by the Certifi cation Regime No Not captured by the Certifi cation Regime Is the employee based in the UK? Captured by the Certifi cation Regime Yes Does the employee deal with a client* in the UK? Captured by the Certifi cation Regime Yes No *Client is defi ned in the FCA Handbook Tell us what you think:
Q19: Do you agree with our proposed territorial limitation for the Certification Regime? If not, please explain why.

CP17/26
Chapter 4
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers How the CASS Oversight Certification Function interacts with the CASS Prescribed Responsibility
4.23 Firms holding client money or client assets are subject to specific requirements
(set out in the CASS chapter of our Handbook) and owe particular duties to their clients. The SM&CR reflects and reinforces these requirements.
4.24 A Senior Manager must be responsible and accountable for all elements of CASS
compliance under the CASS Prescribed Responsibility (as set out in paragraph 3.63). A firm can allocate this Prescribed Responsibility to any Senior Manager, but this should be the most senior person responsible for this area. In practice, this will often be allocated to the Senior Manager carrying out the Compliance Oversight role, but this is not a requirement. Once the Prescribed Responsibility has been allocated, it might be the case that this Senior Manager also performs the CASS Oversight Function, which is a Certification Function. In this situation, the person will be a Senior Manager, and therefore there is no need for the firm to also apply the Certification Regime to them.
4.25 However, as the CASS Oversight Function is often operationally focused, the person
performing it might not always be a Senior Manager. In this case, the person with the CASS Oversight Function will fall under the Certification Regime.
4.26 We have taken this approach to give firms flexibility in allocating the CASS
responsibilities, recognising that in practice the person who performs the operational CASS Oversight Function (which focuses on detailed aspects of complying with our rules) might not always also be the most senior individual with ultimate responsibility for this activity within a firm – particularly in larger firms.
4.27 We will consult on changes needed to the CASS Sourcebook to reflect the proposals
set out in this document, in our follow-up Consultation Paper. Tell us what you think:
Q20: Do you agree with the approach we have proposed to allocating CASS responsibilities? If not, please explain why.

CP17/26
Chapter 4
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers Recap What will firms need to do under the Certification Regime? The Certification Regime will make firms more responsible for assessing that their staff are fit and proper to carry out Certification Functions. FCA approval is not required for anyone who performs a Certification Function. Firms will need to:

Identify employees who perform a Certification Function.
Assess whether those employees are fit and proper to perform their role. Firms need to do this
assessment at the point of recruitment (or before a person performs a Certification Function) and on an ongoing, annual basis. We discuss the fit and proper assessment in more detail in the following chapter.
Issue a certificate to the employee if the firm is satisfied that they are fit and proper to perform that
Certification function. The certificate needs to:
state that the firm is satisfied that the person is a fit and proper person to perform the function
the certificate relates to
set out what aspect of the firm’s affairs the person will be involved in as part of performing
their function
If the firm completes a fit and proper assessment and then decides not to issue a certificate to
someone, the firm must give the person a notice in writing setting out:
what steps (if any) the firm proposes to take in relation to the person as a result of the decision
the reasons for proposing this

CP17/26
Chapter 5
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers 5 Fit and Proper requirements All firms should read this chapter. Introduction
5.1 This chapter sets out our proposals for how firms should assess whether Senior
Managers, Non-Executive Directors and individuals under the Certification Regime are fit and proper. In particular, it sets out:

the fit and proper test
the evidence we expect firms to gather when making their assessment
Overview
5.2 A key feature of the SM&CR is to reinforce that firms need to take responsibility
for their staff being fit and proper to do their jobs. This requirement stems from legislation. FSMA requires firms to make sure anyone performing a Senior Management Function or a Certification Function is fit and proper for their role. In addition to this we propose applying this requirement to Non-Executive Directors who are not Senior Managers.
5.3 Once someone is in a role, firms will need to assess them on an ongoing basis, and at
least once a year. This assessment should take into account relevant FCA rules around the qualifications, training, competence and personal characteristics required for that role.
5.4 We already have a number of rules about qualifications, training, competence and
personal characteristics, and we don’t propose making any further new rules at this stage.
5.5 For example, we have rules:
for firms generally in SYSC 3.1.6 (The Competent Employees Rule)
for firms carrying on activities not subject to TC in SYSC 3.1.928
in relation to retail activities, TC2.1.12 (competence for the relevant role)
28 www.handbook.fca.org.uk/handbook/SYSC/3/1.html

CP17/26
Chapter 5
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers
5.6 Guidance in the FCA’s FIT Handbook sets out the factors that we currently consider
when assessing people as fit and proper under APR. We propose extending the application of FIT to Senior Managers and Certified staff in insurance firms. Tell us what you think. Q21: Do you agree with our proposed approach to rules and guidance on fit and proper tests? If not, please explain why. Evidence requirements
5.7 We propose requiring new evidence that firms will need to collect when assessing
whether candidates for Senior Management roles, Certification Functions or Non‑Executive Directors (even if they are not Senior Managers) are fit and proper. Criminal records checks for Senior Managers
5.8 Under the current Approved Persons application process, firms and candidates need
to declare if a candidate has a criminal record (including any spent convictions the employer has a legal right to be made aware of). This will continue for Senior Manager applications. However, we also propose requiring firms to undertake a criminal records check as part of each Senior Manager approval application. This will ensure the information the candidate has given to the firm is accurate and complete. This requirement will also apply to Non-Executive Directors who are not Senior Managers where a fitness requirement already applies to them.
5.9 This means firms will have to register with to the Disclosure and Barring Service (DBS),
and the equivalent agencies in Scotland and Northern Ireland, who run the checks. Smaller firms may need to use an umbrella organisation to access these services.
5.10 We also propose that where a candidate has spent a considerable amount of time
working or living outside the UK, firms should consider undertaking an equivalent check with the appropriate overseas regulatory body, where possible.
5.11 We don’t propose to mandate criminal record checks for Certified staff, but firms may
choose to conduct these checks for other staff where they are legally allowed to do so – this is up to firms to decide. Tell us what you think Q22: Do you agree with our proposed requirements on criminal record checks? If not, please explain why. Regulatory references for Senior Managers and Certified persons
5.12 The FCA and the PRA applied the Fair and Effective Markets Review (FEMR)
recommendations and made new rules on regulatory references that came into force in March 2017. These rules apply to banks and insurers – both Solvency II (SII) and large NDFs – and, to a limited extent, to solo-regulated firms and small NDFs.
5.13 We now propose requiring all insurers seeking to appoint someone to a Senior
Manager or a Certified role to request a regulatory reference from the candidate’s past

CP17/26
Chapter 5
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers employer(s). This requirement will also apply to all Non-Executive Directors who aren’t Senior Managers.
5.14 These references will help firms make better informed decisions about candidates.
5.15 The proposed rules will require firms to:

request a reference from all previous employers in the past six years for people
applying for Senior Manager, Certification and non-approved Non-Executive Director roles
share information between one another in a standard template
disclose certain mandatory information going back six years, including details of
disciplinary action taken due to breaches of the Conduct Rules and any findings that the individual was not fit and proper
disclose any other information relevant to assessing whether the candidate is fit
and proper (for example, the number of upheld complaints), covering the previous six years, although for serious misconduct there will be no time limit and firms will need to use their judgement when considering what is relevant, on a case-bycase basis
retain records of disciplinary/fit and proper findings going back six years
not enter into arrangements that conflict with their disclosure obligations
(eg non‑disclosure agreements)
5.16 In addition, firms will need to update regulatory references where new, significant
information comes to light.
5.17 Regulatory references already apply to Solvency II firms and large NDFs, for Approved
Persons and standard Non-Executive Directors (NEDs). We propose that regulatory references will now apply to Certified staff as well.
5.18 Since March 2017, small NDFs have been required to provide a reference upon
request and to include all relevant information in the reference going back six years. We propose to now apply the same full set of requirements to small NDFs as for Solvency II firms and large NDFs.
5.19 Applying the regulatory reference rules to all insurers will provide them with a more
complete picture of someone’s conduct, allowing them to better assess whether that person is fit and proper. This should, in turn, encourage staff to take greater responsibility for their own conduct. Tell us what you think Q23: Do you agree with our proposals to extend the requirement for regulatory references to all insurers and to cover Certified persons? If not, why not?

CP17/26
Chapter 6
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers 6 Conduct Rules All firms should read this chapter, as the Conduct Rules apply to all insurers. Introduction
6.1 This chapter sets out our proposals for:

the scope and content of a new set of enforceable Conduct Rules
the training and notification requirements that are linked to the Conduct Rules
Overview
6.2 The Banking Reform Act replaced the regulators’ power to write Statements of
Principle and Code of Practice for Approved Persons (APER) with a power to write rules of conduct that can be applied to all employees within a firm.
6.3 As a result, the FCA introduced a new set of enforceable Conduct Rules in the Code of
Conduct (COCON) Sourcebook,29 building on existing elements of the APER principles. COCON sets basic standards of good personal conduct, against which we can hold individuals to account. These rules currently apply to approved roles in insurers as well as to the banking sector.
6.4 We believe that Conduct Rules are an important tool in ensuring all relevant staff in
firms are clear about our expectations of their conduct and that the FCA can take action where these expectations are not met.
6.5 The aim is to:
shape the culture, standards and policies of a firm as a whole
promote more positive behaviours that actively support the FCA’s priorities of
reducing consumer harm and promoting market integrity
6.6 Additionally, the possibility of enforcement should deter people from doing something
that could damage the firm or its customers (which could also indirectly undermine the integrity of financial markets).
6.7 Our proposed conduct rules are intended to drive up standards of individual behaviour
in financial services. They represent a meaningful change in the standards of conduct we expect from those working in the industry. By applying the conduct rules to a broad 29 www.handbook.fca.org.uk/handbook

CP17/26
Chapter 6
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers range of staff we aim to improve individual accountability and awareness of conduct issues across firms. What are the Conduct Rules?
6.8 There are nine Conduct Rules, listed in Table 10.
Table 10: Proposed Conduct Rules
First Tier – Individual Conduct Rules

You must act with integrity
You must act with due care, skill and diligence
You must be open and cooperative with the FCA, the PRA and other regulators
You must pay due regard to the interests of customers and treat them fairly
You must observe proper standards of market conduct
Second Tier – Senior Manager Conduct Rules SC1. You must take reasonable steps to ensure that the business of the firm for which you are responsible is controlled effectively SC2. You must take reasonable steps to ensure that the business of the firm for which you are responsible complies with the relevant requirements and standards of the regulatory system SC3. You must take reasonable steps to ensure that any delegation of your responsibilities is to an appropriate person and that you oversee the discharge of the delegated responsibility effectively SC4. You must disclose appropriately any information of which the FCA or the PRA would reasonably expect notice
6.9 For insurers, Conduct Rules 1 to 5 currently apply to all staff approved by either the
FCA or the PRA. Conduct Rules SC1 to SC4 apply to all FCA SIF holders30 and the PRA’s Senior Insurance Management Functions (SIMFs).31
6.10 In May 2017, we published final rules that now apply the five individual Conduct
Rules and Senior Manager Conduct Rule 4 to standard NEDs, in addition to all approved NEDs.
6.11 There are two main questions we need to consider when applying the Conduct Rules
to all insurers:

who (ie which type of role) the Conduct Rules apply to
the type of activities the Conduct Rules apply to
30 www.handbook.fca.org.uk/handbook/SUP/10A/5.html 31 Under the Act, the PRA may only designate controlled functions that it considers to be Senior Insurance Management Functions.

CP17/26
Chapter 6
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers Who the Conduct Rules apply to Our proposals
6.12 We propose applying the Conduct Rules to the following types of role:

all Senior Managers
all Certification staff
all Non-Executive Directors who are not Senior Managers (to whom, in addition to
the individual Conduct Rules, we propose applying the Senior Manager Conduct Rule 4 to ‘disclose appropriately any information of which the FCA or the PRA would reasonably expect notice’ to these individuals)
all other employees, except ancillary staff (ie people who don’t perform a role
specific to financial services, eg receptionists, catering staff etc.)
6.13 We recognise that the Conduct Rules may involve additional costs for firms. However,
we’ve proposed applying the Conduct Rules to the majority of employees working in firms because we consider they are an important tool to achieve cultural change across organisations, and not just at the Senior Manager and Certification level. Firms should be able to demonstrate that they apply the spirit as well as the letter of the Conduct Rules. By this we mean that we expect firms to ensure that staff understand what the rules mean to them in the context of their particular firm.
6.14 The list of roles that we consider ancillary and therefore out of scope of the Conduct
Rules are set out below (this is an exhaustive list):
receptionists
switchboard operators
post room staff
reprographics/print-room staff
property/facilities management
events management
security guards
invoice processing
audio visual technicians
vending machine staff
medical staff
archive records management
drivers

CP17/26
Chapter 6
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers

Corporate Social Responsibility staff
data controllers and processors under the Data Protection Act
cleaners
catering staff
personal assistants, secretaries
Information Technology Support (ie helpdesk)
Human Resources administrators/processors
6.15 We invite feedback on the proportionality of our proposals.
Activities the Conduct Rules apply to
Our proposals
6.16 We propose applying the Conduct Rules to a firm’s regulated and unregulated financial
services activities (including any related ancillary activities carried on in connection with a regulated activity).
6.17 This is narrower than the application under the banking regime, where the Conduct
Rules apply to everything someone does on behalf of the bank, whether it’s regulated or unregulated, or linked to financial services. We think this narrower approach for insurers is proportionate because there is less evidence of potential harm to consumers or market integrity.
6.18 However, we have not limited the application of the Conduct Rules to only cover an
employee’s role in relation to the regulated activities of an insurer, as we consider this would be too narrow. In practice, conduct issues that have an impact on our objectives won’t be limited to the regulated areas of a firm’s business. Therefore, unregulated financial services activities such as property investment for both life and non-life insurers will be in scope of the Conduct Rules. Tell us what you think Q24: Do you agree with our proposal to apply the Conduct Rules to all employees, except ancillary staff? If not, why not? Q25: Do you agree with our proposed scope of the Conduct Rules to financial services activities whether regulated or unregulated? If not, why not?

CP17/26
Chapter 6
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers Training and notification requirements
6.19 FSMA requires firms to make the individuals who are subject to the Conduct Rules
aware that this is the case, and train them in how the rules apply to them.
6.20 FSMA also requires firms to notify us when disciplinary action has been taken against a
person for any reason specified by us. We propose to require notification of disciplinary action only if that action was because of breaches of the Conduct Rules. For Senior Managers, we propose that firms notify us of this information within seven business days of the firm becoming aware of the matter. For other staff, we propose the notification is made once a year. We will be consulting on the form that will be used to notify us of these breaches and changes to all other forms as part of our technical Consultation Paper later this year).
6.21 The new notification requirements won’t change or remove firms’ obligations to report
concerns about an individual’s conduct under existing rules and principles, such as SUP 15 and FCA Principle 11. Tell us what you think Q26: Do you agree with our proposals about notifications under the Conduct Rules? If not, please explain why. Q27: Do you agree with our proposal to link notification requirements for disciplinary action to breaches of the Conduct Rules? Q28: Do you agree with our proposed frequency of Conduct Rules notifications? If not, please explain why. What will firms need to do? There are two obligations for firms about the Conduct Rules:

training staff
notifying us when disciplinary action is taken because of a breach of the Conduct Rules
A firm must also allocate the Prescribed Responsibility for the firm’s obligations for Conduct Rules notifications and training. What will individuals need to do? Where the Conduct Rules apply, relevant individuals need to be aware of and comply with the rules as
part of their job.

CP17/26
Chapter 7
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers 7 UK branches of foreign firms European Economic Area (EEA) and non-European Economic Area (non-EEA) branches should read this chapter.
7.1 This section sets out our proposals for incoming branches, specifically UK branches of
EEA firms (EEA branches)32 and third-country branches (non-EEA branches).
7.2 This section should be read in conjunction with our proposals for Solvency II firms,
large NDFs and small NDFs presented in Chapters 3, 4, 5 and 6. How does SMR apply to EEA branches?
7.3 The FCA currently applies a subset of significant influence controlled functions to EEA
branches to reflect the split of home/host state responsibilities under the relevant single market directives. This includes the Money Laundering Reporting Officer (CF11) and the Significant Management function (CF29).
7.4 Under the SM&CR, we propose designating the executive functions shown in Table 11
as SMFs. These are the same as the executive roles that currently apply under the revised APR.
Table 11: Proposed executive Senior Management Functions in EEA branches
SMF21 – EEA Branch Senior Manager
SMF17 – Money Laundering Reporting Officer
7.5 The Money Laundering Reporting function will be defined in the same way as for UK
Solvency II firms.
7.6 The EEA Branch Senior Manager (EBSM) will cover individuals with responsibility for the
management and conduct of the business of the branch.
7.7 As is the case for UK-authorised firms, there is no territorial limitation for Senior
Managers in EEA branches. This means that the Senior Managers Regime will apply to anyone who performs a Senior Manager role, whether they are based in the UK or overseas. In practice, we expect most branches to be able to identify Senior Managers who are primarily based in the UK. Fit and proper
7.8 We will not form a judgement on whether an individual applying to perform the EEA
Branch Senior Manager is fit and proper, as we consider this more properly to be a matter for the home member state. But, we are still interested in the person’s honesty, integrity and financial soundness as it affects the conduct obligations to which the branch is subject. 32 EEA branches are branches of insurance firms that are headquartered in the EEA and are subject to the Solvency II Directive.

CP17/26
Chapter 7
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers Prescribed Responsibilities
7.9 Allocation of responsibilities is a matter which we consider to be for the home member
state, so our Prescribed Responsibilities will not apply to EEA branches. Similarly, we aren’t proposing requirements around handover procedures for Senior Managers. Responsibilities Maps
7.10 We propose requiring EEA Branches to provide and maintain Responsibilities Maps.
This is similar to the approach we took for branches of EEA banks. Firms need to note that the general override principle applies, ie where home state requirements provide equivalent protection to our rules, our rules will not apply.
7.11 Our proposal for Responsibilities Maps could overlap with information received as part
of the ‘required details’ provided when an EEA branch passports into the UK. We will mirror the amendment to the rule we made for EEA banking branches to specifically avoid duplication. Tell us what you think Q29: Do you agree with our proposals for applying the Senior Managers Regime to EEA branches? If not, why not? Certification Regime in EEA branches
7.12 We propose applying the Certification Regime in the same way as for Solvency II firms.
However, we propose restricting the Certification functions so they apply only in relation to the branch. In addition, EEA branches should note that the CASS oversight function will not apply, as the CASS rules don’t apply to EEA branches.
7.13 A territorial limitation will apply. That means that the Certification Regime will only
apply to individuals who are based in the UK. It will not extend to people based outside the UK, even if they deal with a UK client. Tell us what you think Q30: Do you agree with our proposal to apply the Certification Regime to EEA branches with the adaptations set out? If not, why not? How do Conduct Rules apply to EEA branches?
7.14 We propose applying our Conduct Rules to EEA branches, as we proposed for Solvency
II firms in Chapter 6. However, the Conduct Rules will only apply to staff in EEA branches in relation to matters that are within the UK’s scope of responsibilities as the host state regulator – ie the ‘single market override’ will apply. As with the Certification Regime, the Conduct Rules won’t apply to employees based outside the UK.

CP17/26
Chapter 7
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers Tell us what you think Q31: Do you agree with our proposal to apply the Conduct Rules to EEA Branches? If not, why not? Senior Managers Regime in non-EEA branches Senior Managers
7.15 We propose specific Senior Management Functions that cover the senior individuals
responsible for the management of the branch business.
7.16 Table 12 shows our proposed five Senior Management Functions.
Table 12: Proposed Senior Management Functions in non-EEA branches
SMF3 – Executive Director
SMF27 – Partner
SMF16 – Compliance Oversight
SMF17 – Money Laundering Reporting Officer SMF22 – Other Local Responsibility function
7.17 The Executive Director (SMF3) function will mirror the existing Director controlled
function (CF1). Its scope will cover people performing their role in relation to the branch only, rather than in relation to the whole firm.
7.18 The Other Local Responsibility (SMF22) function will operate in a similar way to the
Other Overall Responsibility (SMF18) function proposed for Solvency II firms. It will include any individuals who have local responsibility for any of the activities, business areas or management function of the branch. Therefore, if a branch has allocated local responsibility for all the activities, business areas and management functions of the branch between its other SMFs, it will not need to have any individuals approved under the Other Local Responsibility function.
7.19 Currently, we apply the Systems and Control (CF28), the Significant Management
(CF29), and the Chair of the Nominations Committee (CF2a) functions. We propose to stop requiring approval for these functions under the SMR. However, we expect that the functions that will be dropped will closely map to the Other Local Responsibility function, so we don’t expect our proposals to result in a significant change from current APR rules.
7.20 The Actuarial Conduct Function (CF51) was introduced under the FCA’s revised APR
for insurers in response to PRA changes made in light of Solvency II. Under current rules, the PRA have an SIMF19 (Head of Third-Country Branch function), which covers the responsibility for the conduct of all activities of the third-country branch subject to the regulatory system. As FCA COCON requirements would apply to this person, we consider that this affords an appropriate degree of protection to consumers and so we propose no longer to require a specific ‘actuarial conduct’ controlled function. Prescribed Responsibilities
7.21 We propose applying the PRs listed in Table 13. As with Solvency II firms, some of these
responsibilities have been specified by both regulators and others by either the FCA

CP17/26
Chapter 7
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers or the PRA only. Please note that reference to ‘firm’ for this purpose means the UK branch and not the overseas legal entity.
Table 13: Proposed Prescribed Responsibilities in non-EEA branches
Handbook
PRs
Reference
PRA, FCA or shared Prescribed Responsibilities for third-country branches A Shared Performance by the firm of its obligations under the Senior Managers Regime, including implementation and oversight B Shared Performance by the firm of its obligations under the Certification Regime C Shared Responsibilities Maps AA Shared Responsibility for management of the firm’s risk management processes in the UK EE Shared Escalation of correspondence from the PRA, FCA and other regulators in respect of the firm to the governing body and/or the management body… FF Shared Compliance with the UK regulatory system B-1 FCA Responsibility for the firm’s performance of its obligations under the COCON (in terms of training and regulatory reporting) D FCA Local responsibility for the firm’s policies and procedures for countering the risk that the firm might be used to further financial crime Z FCA Local responsibility for the firm’s compliance with CASS O PRA Management of the allocation and maintenance of the firm’s capital, funding and liquidity Q PRA Production and integrity of the firm's financials and its regulatory reporting T PRA Development and maintenance of the firm's business model by the governing body T-2 PRA Performance of the firm’s ORSA U PRA Insurance Fitness & Propriety X PRA Outsourced operational functions (including systems and technology) BB PRA Responsibility for management of the firm’s systems and controls in the UK
7.22 The Senior Managers Regime requires responsibilities to be allocated to the most
senior person with responsibility in the firm. If we applied this to non-EEA branches, we would include the most senior individuals in the legal entity as a whole. So, PRs should be allocated to the most senior individual responsible for the day-to-day management of the function or area of responsibility of the branch only.
7.23 We propose that PRs can only be allocated to individuals performing executive
functions in the branch.
7.24 Our proposal for the CASS PR is in line with our proposals for Solvency II firms and only
applies where CASS requirements apply to the branch.
7.25 PRs, except for the CASS PR, cannot be allocated to those holding the Other Local
Responsibility function.

CP17/26
Chapter 7
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers Responsibilities Map
7.26 We propose that non-EEA branches prepare, submit and, where appropriate, update
a management Responsibilities Map. For firms that don’t have a UK board, but have a management committee or equivalent instead, Responsibilities Maps must set out matters reserved to the management body of the branch, rather than the ultimate overseas governing body.
7.27 We expect non-EEA branches to provide a detailed explanation of how their
management and governance arrangements fit together with those of its overseas head office and the wider group. Tell us what you think Q32: Do you agree with our proposal to apply the Senior Managers Regime to non-EEA branches? If not, why not? Q33: Do you agree with our proposed SMFs for non-EEA branches? If not, why not? Q34: Do you agree with our proposal to remove the Actuarial Conduct Function from the list of approved functions for non-EEA branches? If not, why not? How does the Certification Regime apply to non-EEA branches?
7.28 We propose applying the Certification Regime in the same way as for Solvency II firms,
where necessary restricting the Certification Functions so they apply only in relation to the branch. Tell us what you think Q35: Do you agree with our proposal to apply the Certification Regime to non-EEA branches? If not, why not? How do Conduct Rules apply to non-EEA branches?
7.29 We propose applying the Conduct Rules in the same way as for Solvency II firms.
The Conduct Rules will apply in relation to the activities of the branch only and to individuals who are based in the UK.
7.30 Due to the structure of a branch, staff may also be subject to a Code of Conduct set
by the legal entity. However, the Conduct Rules are drafted at a high level and the FCA does not expect them to be inconsistent with any separate standards set by head office or the home state regulator. Tell us what you think Q36: Do you agree with our proposed approach to Conduct Rules for non-EEA branches? If not, why not?

CP17/26
Chapter 8
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers 8 Insurance Special Purpose Vehicles (Re) insurance firms with Insurance Special Purpose Vehicles, as well as any Insurance Special Purpose Vehicle firms, should read this chapter. Introduction
8.1 This section sets out our proposals for the extension of the SM&CR and Conduct Rules
to Insurance Special Purpose Vehicles (ISPVs).
Overview
8.2 In March 2016, HM Treasury released an initial consultation on the regulatory, tax and
corporate framework for Insurance Linked Securities (ILS) business in the UK and also invited comments on the authorisation and supervision of ISPVs. ISPVs will be used to facilitate the transfer of risk from an insurer to the capital markets via the issuance of ILS.
8.3 In November 2016, HM Treasury consulted on draft regulations for the creation of
the ILS regime (expected to take effect in autumn 2017). Alongside this, we and the PRA published a joint consultation paper outlining the proposed authorisation and supervisory approach for ISPVs. This was followed by an FCA consultation on changes to the FCA handbook to implement the ILS regime (CP17/3), issued at the end of January 2017.33 This included interim governance requirements for ISPVs, until the SM&CR proposals take effect.
8.4 CP17/3 included the following in relation to the governance arrangements of ISPVs:

Applying SYSC 3 to ISPVs, to align the governance requirements for ISPVs
with reinsurers.
As part of the application of SYSC 3, applying CF10 (Compliance Oversight)
to ILS business involving life insurance risks but not to that involving general insurance risks.
The proposed dis-application of the Money Laundering Reporting Officer controlled
function (CF11) for ISPVs. The money laundering risk is low for ILS business given the target market is institutional investors. Also, we understand that the Treasury is not proposing to apply the Money Laundering Regulations (MLRs) for ILS business, so our current proposal is that it would be disproportionate to require CF11. However, we will review our position based on the final position adopted by the Treasury.
8.5 We do not expect that client money requirements in CASS will apply to ILS business
because the ISPVs will not hold money for their investors. However, a trustee firm holding assets or money for an ISPV may be subject to CASS requirements. We intend 33 www.fca.org.uk/publications/consultation-papers/cp17-3-proposed-handbook-changes-insurance-linked-securities

CP17/26
Chapter 8
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers to confirm the final rules affecting interim governance arrangements for ISPVs in a Policy Statement later this year. How does the SM&CR apply to ISPVs?
8.6 We propose applying the key pillars of the SM&CR to ISPVs. This includes the Senior
Managers Regime, Certification Regime and Conduct Rules, supported by some discretionary tools such as Prescribed Responsibilities.
8.7 The PRA has identified three mandatory PRA SMF roles for ISPVs:

Chief Executive Officer
Chief Finance Officer
Chair
8.8 We propose specifying the following Senior Managers, although we do not expect
firms with simple governance structures to necessarily have all of these in place:
SMF 3 – Executive Director
SMF 16 – Compliance Oversight
SMF 27 – Partner
8.9 Similar to our proposed regime for small NDFs, we propose that:
The requirements for Overall Responsibility, SMF18 and Responsibilities Maps
won’t apply.
Statements of Responsibilities will be required (as well as the six-year record-keeping
obligation as per small NDFs proposals).
Prescribed Responsibilities will be applied. However, the list is shorter and reflects
the limited risk that ISPVs pose to our objectives. See Table 14 below for the list of proposed Prescribed Responsibilities.

CP17/26
Chapter 8
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers
Table 14: Proposed Prescribed Responsibilities for ISPVs
Handbook PRs
Reference
PRA, FCA or shared PRs for ISPVs
A Shared Performance by the firm of its obligations under the Senior Managers Regime, including implementation and oversight B Shared Performance by the firm of its obligations under the Certification Regime B-1 FCA Responsibility for the firm’s performance of its obligations under the COCON (in terms of training and regulatory reporting) D FCA Overall Responsibility for the firm’s policies and procedures for countering the risk that the firm might be used to further financial crime U PRA Fitness and Propriety in respect of its notified non – executive directors and key function holders
8.10 We also propose that the Certification Regime and the Conduct Rules apply as for
Solvency II firms.
Tell us what you think
Q37: Do you agree with our SM&CR proposals for ISPVs? If not, why not? Q38: Do you agree with our proposal to apply the Conduct Rules to ISPVs as for Solvency II and large NDFs? If not, why not?

CP17/26
Annex 1
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers
Annex 1
Summary of the cost benefit analysis
Introduction

When proposing rules, we must publish a cost-benefit analysis (CBA) under
Section 138I(2)(a) of FSMA. The CBA must include an analysis and estimate of the
costs arising from, and the benefits brought about by, our proposed rules. This Annex summarises the CBA. Firms should also read our full CBA www.fca.org.uk/publication/ research/cba-extension-senior-managers-certification-regime.pdf
As part of our CBA, we have attempted to calculate:

the likely costs for firms and the FCA, split into one-off and ongoing
the illustrative reduction in harm required for the proposed policy to break-even
(ie for benefits to balance costs)

The benefits and wider indirect effects have not been quantified, as we believe they
cannot reasonably be estimated, given that it would be difficult to do so reliably, and it would not be reasonably practicable to produce an estimate. We have provided a qualitative discussion of these elements instead. Market failures
Our SM&CR proposals seek to address market failures in order to prevent harm from
occurring. Whilst we expect firms to identify and rectify problems themselves, we will work with them to help ensure their systems and controls, governance, and culture enable them to comply fully with our rules.
There are two areas of harm in particular in markets served by solo-regulated firms and
insurers (the firms in scope of the proposed policy) that the SM&CR looks to address:

information asymmetry; firms have more information than their regulator(s)
and firms’ employees have more information than firms’ owners (for example, shareholders)
behavioural biases affecting employees

Information asymmetry exists when one party knows more than the other. This can
cause problems when the party with more information does not act in the interests of the other party. For example, a firm may convince a customer that they need a certain product.

CP17/26
Annex 1
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers
7. Information asymmetry between firms and the regulators arises because the
regulator cannot monitor all activities and outcomes in financial markets, or detect all misconduct.
8. A similar information asymmetry exists between a firm’s employees and its owners.
Employees may think they are unlikely to get caught, and so take excessive risks, leading to poor outcomes for the firm. Similarly, they may also not comply with the firm’s rules more generally.
9. Behavioural biases are distortions that impede people’s ability to make choices that
are in their best interests. Biases can cause people to misjudge important facts or to be inconsistent, for example changing their choices for the worse when the same decision is presented in a different way, or imitating their peers even though it’s not in their interests. In other words, our normal human thought processes can lead us to make mistakes.
10. The SM&CR is designed to address these failures and improve how markets function.
This, in turn, should contribute to our consumer protection objective.
11. A CBA assesses the costs and benefits of a proposed policy compared to how the
markets would evolve in absence of the policy (the ‘counterfactual’). We have used the revised Approved Persons Regime (APR) implemented as part of the EU Solvency II Directive as the counterfactual (which is currently in force). Compliance costs and costs to the FCA
12. There is often a compliance cost for firms when they apply requirements from the
regulator. For example, staff may need additional training and supervision, or new IT equipment might be needed to document compliance. Some of these costs only arise when the new requirements are implemented (ie one-off costs), for example due to system changes, while others will be ongoing, for example training for new joiners.
13. To assess these costs we sent questionnaires to 2,017 firms (at legal entity level).34
We received responses from 190 solo-regulated firms and 37 insurers. Firms reported individual costs incurred against each of the elements of the regime, split into a number of subcategories such as training, organisational restructure and staff monitoring. We have used these ‘reported costs’ in our CBA.
14. However we acknowledge that our CBA estimates are subject to a number of
uncertainties (see our full CBA for details). Therefore, we have also calculated ‘revised estimates’ which we believe are a better reflection of the true costs that firms will incur to comply with the proposed policy on a one-off and ongoing basis. We have calculated these by excluding cost categories that are unlikely to be borne in practice. 34 To increase the number of expected responses by insurers, the original sample of 1,740 firms contacted on 28 September 2016 was enlarged by a further sample of 277 insurers (FRNs) on 2 November 2016.

CP17/26
Annex 1
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers
15. Table 12 below presents the revised estimates calculated, and the lower bounds of
these estimates. The reported estimates are presented in Annex 1 of our full CBA document.
Table 15: Total one-off and annual ongoing costs for the regime for insurers, £m
Regime one-off ongoing
Small NDFs and small insurers in run-off* 0.8 – 0.9 0.6 Solvency II and large NDFs 8.0 – 8.1 2.6 – 3.5 Total 8.8 – 8.9 3.2 – 4.1 Source: FCA survey of firms (undertaken Q4 2016). *As explained in paragraph 3.59 the cost for small NDFs and small insurers in run-off are not reliable. Where we present one figure for the revised estimate this is because the two figures are the same.
16. In addition, we estimate that the FCA will itself incur an estimated £13.4 million over
4 years as the new regime is developed and implemented. These costs are to cover FCA staff costs (£7.9m), training for FCA staff, and communication to industry and consultancy costs (£1.9m) and to develop the IT infrastructure to enable the new regime to function (£3.6m).
17. The total cost to the FCA for the whole SM&CR extension includes the costs of
extending the policies to solo-regulated firms and insurers. It is not possible to split out the costs attributable to solo-regulated firms and insurers separately. Indirect costs and wider impacts
18. Indirect costs result from people changing their behaviour as a result of the policy,
rather than as a direct result of complying with the policy itself. For example, placing higher levels of responsibility on Senior Managers may mean some leave financial services, increasing recruitment costs.
19. Operational efficiency looks at trying to maximise output for a given level of input,
ie trying to allocate a firm’s resources to produce the highest level of output possible. The overall impact of our SM&CR proposals on operational efficiency is unclear. On the one hand, increasing the monitoring of staff conduct and activity may take resources away from more profitable areas. On the other hand, it could result in better decision making and final products, as there is closer scrutiny and review in the development process.
20. We do not expect a significant net change in competition, although there may be several
effects pulling in different directions. Areas where we expect competition may be affected are product innovation, firm entry and exit to the market, and international competitiveness. Product innovation may be delayed due to a lengthier sign-off process (although this could improve the end-product), and more risky innovation may be avoided altogether, as senior managers seek to reduce the risks they may be held accountable for. However it has been recognised that regulation can also foster innovation. There may be changes to firm entry and exit in markets as the relative cost of the SM&CR will vary according to the size and complexity of firms. Finally, as the full scope of SM&CR applies to firms in the UK, domestic firms will face relatively higher costs to foreign firms, reducing their competitiveness. On the other hand, higher standards of conduct and culture may improve the integrity of the market, drawing in foreign investment and business. Importantly, we are unlikely to see a negative effect

CP17/26
Annex 1
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers on competition that is in the interest of consumers if firms that cannot meet basic standards leave the market.
21. We expect some cost increases on firms to pass through to consumers in the form
of higher prices. However, some markets will experience lower prices as exploitative behaviour is reduced, competition is improved, and firms improve their standards and compliance.
22. The SMR may lead to higher wages for Senior Managers as they demand more pay for
the increased responsibility (and potential liability) that the SMR introduces. For the same reason, it may also be harder to attract and retain Senior Managers in financial services. However, regulatory references and the annual fit and proper checks should reduce the ‘recycling’ of inappropriate staff, which may result in increased profits for firms and better products for consumers.
23. If the extension of the SM&CR is perceived to be fair and justifiable, firms’
compliance may be improved. However, if the regime is perceived as unnecessary or disproportionate, this may reduce firms’ engagement with regulation, increasing non‑compliance. Potential benefits
24. A robust individual accountability regime can reinforce acceptable standards of
behaviour and be a critical factor for deterring misconduct. Ultimately, its main aim is to drive culture change by making Senior Managers more accountable and by applying basic conduct standards to all financial services staff. There are a number of channels through which we expect the SM&CR to drive the reduction in harm.
25. Firstly, culture and standards will be driven up through increased accountability at the
senior level, supported by a new ‘duty of responsibility’ on Senior Managers, senior Conduct Rules and the Certification Regime. Better culture throughout the firm should improve outcomes for consumers by reducing exploitative behaviour.
26. Secondly, through the application of Conduct Rules, associated reporting
requirements and firm-level assessments of staff’s suitability, we expect misconduct to be more easily identified. Also, the wider application of our Conduct Rules, combined with other SM&CR tools (such as Statements of Responsibilities, Responsibilities Maps, Prescribed Responsibilities and Overall Responsibility requirements) will broaden the scope for, and increase the focus and effectiveness of, FCA disciplinary actions, where appropriate. In short, we expect misconduct is more likely to be caught and sanctioned. This should reduce misconduct and therefore reduce harm to consumers.
27. Thirdly, the Certification Regime and Conduct Rules should encourage more effective
competition. By improving compliance and reducing misconduct, we might expect increased competition in the interests of consumers, rather than competition between firms that seek to exploit consumers’ information asymmetries or their behaviour. By reducing exploitation, firms that act in the best interests of consumers are more likely to get business, leading to stronger competition and better, cheaper products for consumers.

CP17/26
Annex 1
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers
28. Fourthly, increased accountability should lead to better decision making within firms.
Improved decision making should cut costs and/or lead to better quality products. Customers should experience lower prices and better products/services.
29. Finally, the introduction of conditional approvals, regulatory references and a reduction
in the number of individuals approved by the Regulator should improve staff hiring processes in firms.
30. Collectively, our policy proposals should reduce the market failures identified earlier,
specifically, information asymmetry and behavioural distortions. Illustration of potential benefits
31. We have not attempted to quantify the benefits because we believe that they cannot
reasonably be estimated taking account of the difficulties in the likely reliability of any such estimate. Nor do we think it is reasonably practicable to produce such an estimate, in light of the difficulties in likely reliability.
32. Instead, we have attempted to quantify the harm that consumers experience from
products or services they have bought. Such problems include financial loss (eg from buying a product that doesn’t suit their needs), loss of time and other factors, such as distress.
33. Using data on redress and fines, we have tried to illustratively quantify the harm from
misconduct. The approach we use allows us to provide a basic estimate of harm that actually occurred and therefore of the potential benefits of the proposed policies from a reduction of this harm.
34. We use three sources of data to provide an estimate of the level of harm caused by
firms affected by these proposals:

redress paid to compensate for harm
costs of handling complaints
the fines for misconduct imposed by the FCA

CP17/26
Annex 1
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers
Table 16: Estimated unpaid redress, complaints-handling costs and fines per
year, insurers
Redress, £m Total , £m
Regime
Lower
(Unpaid redress)
Upper
(any problem)
Admin.
Costs,
£m Fines, £m
Lower
(Unpaid redress)
Upper
(any problem)
All insurers 134.3 235.7 77.3 4.5 216.1 317.5 Solvency II, large NDFs
134.3 235.6 77.2 4.5 216.0 317.3
Small NDFs, small insurers in run-off
0.1 0.0 0.2 0.2
FCA analysis. Columns and rows may not sum to their totals due to rounding. Comparison of costs and benefits
35. We calculated, based on the quantifiable costs, what percentage reduction in harm
identified would be needed for the proposed policy packages to break-even.
36. We recognise that the costs in this analysis are only an illustrative estimate of harm.
However, accepting these limitations, the following analysis demonstrates that the proposals are likely to be proportionate to the scale of the likely harm in financial services that our proposals seek to address.
37. To create an overall measure of the costs and benefits over a 10-year period, we
convert them to ‘present values’ (PV) and then sum them. The PV reflects that society prefers to receive goods and services sooner rather than later and to defer costs to future generations. That is, costs incurred in the future are valued less than costs incurred immediately.35
38. The analysis indicates that a greater than 1%-2% reduction in harm identified would
lead to benefits that are larger than the compliance costs for insurers.
Table 17: Reduction in harm needed to break even, all firms by 10-year present value
Regime
Compliance cost PV,
£m
Total estimated harm PV
£m*
Required reduction in harm to breakeven* Insurers 36.7 – 44.6 1,797.5 – 2,640.2 1-2% FCA analysis. This shows the share of the compliance costs (net of cost savings due to fewer pre-approvals) against the unpaid redress, complaints handling costs and fines using an interest rate of 3.5%. *While the lower bound of the total illustrative harm may underestimate the harm to some extent, the upper bound is a considerable overestimate of the harm.
39. It also appears likely that the additional, non-quantifiable benefits of the proposed
policies will outweigh the indirect costs.
40. The proportionality of the regime appears clear for large insurers where we only need a
small reduction in harm for the policy to be net beneficial. 35 We use 3.5%, the discount rate used by HM Treasury for policy appraisal.

CP17/26
Annex 1
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers
41. Overall, we expect the reduction in harm to outweigh the costs of implementing the
proposals, and the policy to be net beneficial.
Tell us what you think:
Q39: Based on the summary above and the full analysis available here www.fca.org.uk/publication/research/cbaextension-senior-managers-certification-regime.pdf, do you agree with our approach and methodology to the cost-benefit analysis? If not, please explain why.

CP17/26
Annex 2
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers
Annex 2
List of questions
Q1: Does the proposed list of FCA Senior Managers cover the appropriate roles, ie the most senior decision makers within a firm? Q2: Are there any other roles that the FCA should consider specifying as SMFs? Q3: Are there any proposed Senior Managers that the FCA should consider excluding? Q4: Do you agree with our proposal to introduce a Conduct Risk Oversight Officer for Lloyd’s? Q5: Do you agree with the proposed Overall Responsibility SMF? Q6: Do you agree with our proposal to extend the scope and definition of SMF16 to cover all FCA requirements? Q7: Do you agree with our proposal to extend the Chair of the With-Profits Committee to cover any person(s) performing the with-profits advisory arrangement? Q8: Do you agree with our proposal to extend the 12-week rule to apply to responsibilities under the ‘Overall Responsibility’ requirement? If not, please explain why. Q9: Do you agree with our approach to Prescribed Responsibilities and our proposed list of PRs? Q10: Do you agree with our approach to dividing and sharing Prescribed Responsibilities? Q11: Do you agree with our proposals on Statements of Responsibilities? Q12: Do you agree with our proposal to require firms to maintain, produce and, where relevant, submit Responsibilities Maps? Q13: Do you agree with our proposal to apply handover requirements to Solvency II firms and large NDFs? If not, please explain why. Q14: Do you agree with our proposals for small NDFs? Q15: Do you agree with our proposals for small run-off firms?

CP17/26
Annex 2
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers Q16: Do you agree with the functions we have proposed making Certification Functions? Q17: Are there any other functions that we should make a Certification Function? Q18: Do you think the identity of people performing Certification Functions should be made public by firms? If so, which Certification Functions should be made public? Q19: Do you agree with our proposed territorial limitation for the Certification Regime? If not, please explain why. Q20: Do you agree with the approach we have proposed to allocating CASS responsibilities? If not, please explain why. Q21: Do you agree with our proposed approach to rules and guidance on fit and proper tests? If not, please explain why. Q22: Do you agree with our proposed requirements on criminal record checks? If not, please explain why. Q23: Do you agree with our proposals to extend the requirement for regulatory references to all insurers and to cover Certified persons? If not, why not? Q24: Do you agree with our proposal to apply the Conduct Rules to all employees, except ancillary staff? If not, why not? Q25: Do you agree with our proposed scope of the Conduct Rules to financial services activities whether regulated or unregulated? If not, why not? Q26: Do you agree with our proposals about notifications under the Conduct Rules? If not, please explain why. Q27: Do you agree with our proposal to link notification requirements for disciplinary action to breaches of the Conduct Rules? Q28: Do you agree with our proposed frequency of Conduct Rules notifications? If not, please explain why. Q29: Do you agree with our proposals for applying the Senior Managers Regime to EEA branches? If not, why not? Q30: Do you agree with our proposal to apply the Certification Regime to EEA branches with the adaptations set out? If not, why not?

CP17/26
Annex 2
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers Q31: Do you agree with our proposal to apply the Conduct Rules to EEA Branches? If not, why not? Q32: Do you agree with our proposal to apply the Senior Managers Regime to non-EEA branches? If not, why not? Q33: Do you agree with our proposed SMFs for non-EEA branches? If not, why not? Q34: Do you agree with our proposal to remove the Actuarial Conduct Function from the list of approved functions for non-EEA branches? If not, why not? Q35: Do you agree with our proposal to apply the Certification Regime to non-EEA branches? If not, why not? Q36: Do you agree with our proposed approach to Conduct Rules for non-EEA branches? If not, why not? Q37: Do you agree with our SM&CR proposals for ISPVs? If not, what is it you don’t agree with and why? Q38: Do you agree with our proposal to apply the Conduct Rules to ISPVs as for Solvency II and large NDFs? If not, why not? Q39: Based on the summary above and the full analysis available here www.fca.org.uk/publication/research/cbaextension-senior-managers-certification-regime.pdf, do you agree with our findings and conclusions to the costbenefit analysis? If not, please explain why.

CP17/26
Annex 3
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers
Annex 3
Compatibility statement
42. This Annex records the FCA’s compliance with a number of legal requirements
applicable to the proposals in this consultation, including an explanation of the FCA’s reasons for concluding that our proposals in this consultation are compatible with certain requirements under the Financial Services and Markets Act 2000 (FSMA).
43. When consulting on new rules, the FCA is required by section 138I(2)(d) FSMA to
include an explanation of why it believes making the proposed rules is (a) compatible with its general duty, under s. 1B(1) FSMA, so far as reasonably possible, to act in a way that is compatible with its strategic objective and advances one or more of its operational objectives, and (b) its general duty under s. 1B(5)(a) FSMA to have regard to the regulatory principles in s. 3B FSMA. The FCA is also required by s. 138K(2) FSMA to state its opinion on whether the proposed rules will have a significantly different impact on mutual societies as opposed to other authorised persons.
44. This Annex also sets out the FCA’s view of how the proposed rules are compatible with
the duty on the FCA to discharge its general functions (which include rule-making) in a way that promotes effective competition in the interests of consumers (s. 1B(4)). This duty applies in so far as promoting competition is compatible with advancing the FCA’s consumer protection and/or integrity objectives.
45. In developing our proposals, we have had regard to the recommendations made
by the Treasury under s. 1JA FSMA about aspects of the economic policy of Her Majesty’s Government.
46. Treasury’s recommendations most relevant to our proposals are the following:

The government’s economic policy – ‘continuing to strengthen the financial system,
improving the regulatory framework to reduce risks to the taxpayer and building resilience, so that it can provide finance and financial services to the real economy and realise better outcomes for consumers, supporting sustainable economic growth and encouraging productive investment.’
Matters about aspects of the government’s economic policy that relate to ‘Growth’,
‘Better outcome for consumers’ and ‘Competition’.

Our proposals are intended to have a positive impact on the behaviour and culture of
the firms in question, which should contribute to greater sustainability of any growth in the financial services markets and in the UK economy as a result.
Also, one of the main objectives of our proposals is to ensure that Senior Managers are
clear about the responsibilities they hold and are held accountable for the performance of these responsibilities. There are also specific standards of conduct that will apply to Senior Managers and financial services staff. Our proposals aim to raising conduct standards and improving culture. Therefore, they intend to have a positive impact on the financial system by improving the regulatory framework to reduce risks and realise better outcomes for consumers.

CP17/26
Annex 3
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers
49. We believe that our proposals do not undermine Treasury’s recommendations relating
to ‘Competition’. We have kept competition in mind when framing how these proposals should be implemented. In particular, we have focussed on whether there is a risk of weakening competitive pressure, disadvantaging smaller firms and potential new entrants. In considering applying the SM&CR to all FSMA authorised firms, we have been mindful of the need to consider the impact on those firms that pose lower risk to our statutory objectives. Therefore, our proposals have been specifically tailored to reflect the different businesses carried out by different persons and allow firms flexibility in how to achieve these.
50. For a detailed assessment of the equality and diversion implications of these
proposals, see paragraph 1.38.
The FCA’s objectives and regulatory principles: Compatibility statement
51. The proposals set out in this consultation are primarily intended to advance the
FCA’s operational objective of securing an appropriate degree of protection for consumers. They are also relevant to our operational objective of ensuring that the relevant markets function well. They will clarify the lines of responsibility at the top of relevant firms and enhance the regulators’ ability to hold senior and other individuals in such firms to account. This should, over time, result in improved governance across financial services.
52. In preparing the proposals set out in this consultation, the FCA has had regard to the
regulatory principles set out in s. 3B FSMA.
The need to use our resources in the most efficient and economic way
53. The proposals set out in this consultation will impact the FCA’s existing authorisations,
supervision and enforcement processes and systems. The FCA will incur additional short-term costs as the regime is implemented (for example, there will be an increase in staff costs leading up to the implementation date). The FCA will also incur costs in developing the IT infrastructure for the new regime. These costs are set out in the detailed Cost Benefit Analysis.
54. Following the implementation, there’s not expected to be any significant change in the
level of resources the FCA uses, relative to the costs of regulating the current regime. The principle that a burden or restriction should be proportionate to the benefits
55. The proposals are intended to result in beneficial changes in behaviour and reduce
non-compliance, misconduct, excessive risk taking and un-allocated individual responsibility. Firms are likely to incur both direct and indirect compliance costs, but our Cost-Benefit Analysis shows that these are not excessive, compared to the potential benefits to consumers. We therefore believe that the proposals in this Consultation Paper are proportionate to the benefits. The desirability of sustainable growth in the UK economy in the medium or long term
56. Our proposals are intended to have a positive impact on the behaviour and culture of
the firms in question, which should contribute to greater sustainability of any growth in the insurance market.

CP17/26
Annex 3
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers The general principle that consumers should take responsibility for their decisions
57. The proposals we have made concern firms’ governance arrangements and
requirements applying to their staff. These are not matters over which consumers can have any influence, and they simply have to accept the firm they deal with as it is. However, with an improved culture and raising of standards within firms to treat customers fairly and have proper regard to their informational needs, there is implicit support that firms would be better placed to enable consumers to take responsibility for their own decisions. The responsibilities of senior management
58. One of the main objectives of the proposals contained in this Consultation Paper
is to ensure that Senior Managers are clear about the responsibilities they hold and are more effectively held accountable for the performance of these responsibilities. There are also specific standards of conduct that apply to Senior Managers through the Senior Manager Conduct Rules. The desirability of recognising differences in the nature and objectives of business carried out by different persons including mutual societies and other kinds of business organisations
59. We believe our proposals do not undermine this principle. In considering applying the
SM&CR to all insurers, we have been mindful of the need to consider the impact on small Non-Directive Firms (small NDFs).
60. Broadly speaking, we decided that the broad tiers of the regime should apply to all
relevant firms – ie the Senior Managers Regime, Certification Regime and Conduct Rules. This is because the risks to consumers in dealing with badly governed smaller firms is the same as with larger firms. Having said that, although our proposals are designed to lead to similar outcomes for consumers, regardless of the firm they deal with, they have been specifically tailored to reflect the different businesses carried out by different persons and allow firms flexibility in how to achieve these. So the Senior Managers Regime is designed to avoid imposing a uniform governance structure on all firms, although all firms will need to demonstrate clear lines of accountability within the governance structure. The Certification Regime also allows firms to identify the functions that can cause significant harm to their business models and consumers. The Code of Conduct is also written at a high level to allow it to reflect the levels of complexity and riskiness of different firms’ business. The desirability of publishing information relating to persons subject to requirements imposed under FSMA, or requiring them to publish information
61. We will be able to see compliance with the rules either from the information that they
give us (eg under existing requirements in SUP 15, Principle 11 or the new obligation to inform the regulators about disciplinary action arising out of breaches) or by a supervisory visit (eg the operation of the Certification Regime). We do not propose to change our current policy which is that this information is not published, but instead will consider each firm’s circumstances on a case by case basis, including as part of any enforcement investigation. The principle that we should exercise our functions as transparently as possible
62. We have had industry feedback during the pre-consultation stage and engaged with
relevant external stakeholders. We will continue to actively engage with relevant stakeholders throughout the consultation process.

CP17/26
Annex 3
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers Duty to have regard to the importance of taking action intended to minimise the extent to which business may be used for financial crime
63. In formulating these proposals, we have taken into account the importance of taking
action intended to minimise the extent to which it is possible for a business carried on (i) by an authorised person or a recognised investment exchange; or (ii) in contravention of the general prohibition, to be used for a purpose connected with financial crime (as required by s. 1B(5)(b) FSMA). Our proposals seek to address financial crime risks through our SMFs (in particular, the Money Laundering Reporting Officer), Prescribed Responsibilities (in particular, the responsibility for financial crime) and Conduct Rules. Expected effect on mutual societies
64. We do not expect the proposals in this paper to have a significantly different impact on
mutual societies.
Compatibility with the duty to promote effective competition in the interests of consumers
65. Our proposals comply with the FCA’s duty (so far as compatible with acting in a way
which advances the consumer protection or integrity objectives) to discharge its general functions in a way that promotes effective competition in the interests of consumers. We have also kept competition in the interests of consumers in mind when framing how these proposals should be implemented, with a particular focus on whether there is a risk of weakening competitive pressure, disadvantaging smaller firms and potential new entrants. Equality and diversity
66. We are required under the Equality Act 2010 to ‘have due regard’ for the need to
eliminate discrimination and to promote equality of opportunity in carrying out our policies, services and functions. As part of this, we conduct an equality impact assessment to ensure that the equality and diversity implications of any new policy proposals are considered.
67. The outcome of the assessment in this case is stated in paragraph 1.38 of the
Consultation Paper.

CP17/26
Annex 4
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers
Annex 4
Abbreviations used in this paper used in this paper APR Approved Persons Regime APER Statements of Principle and Code of Practice for Approved Persons (Handbook) Banking firms Banks, building societies, credit unions and PRA-designated investments firms CASS Client Assets Sourcebook (Handbook) CBA Cost-Benefit Analysis COBS Conduct of Business Sourcebook (Handbook) COCON Code of Conduct Sourcebook (Handbook) CP Consultation Paper CR Certification Regime DBS Disclosure and Barring Service EEA European Economic Area EU European Union FCA Financial Conduct Authority FEMR Fair and Effective Markets Review FICC Fixed Income, Currency and Commodity FIT The Fit and Proper Test for Approved Persons (Handbook) FSMA Financial Services Markets Act ILS Insurance Linked Securities ISPVs Insurance Special Purpose Vehicles NDF Non-Directive Firms NED Non-Executive Director

CP17/26
Annex 4
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers PCBS Parliamentary Commission of Banking Standards PRs Prescribed Responsibilities PRA Prudential Regulation Authority SIFs Significant Influence Functions SIMR Senior Insurance Managers Regime SIMF Senior Insurance Management Function SHF Significant Harm Function SMF Senior Management Function SMR Senior Managers Regime SOR Statement of Responsibilities SUP Supervision Manual (Handbook) SYSC Senior Management Arrangements, Systems and Controls (Handbook) TC Training & Competence Sourcebook We have developed the policy in this Consultation Paper in the context of the existing UK and EU regulatory framework. We will keep the proposals under review to assess whether any amendments may be required in the event of changes in the UK regulatory framework, including as a result of any negotiations following the UK’s vote to leave the EU. We make all responses to formal consultation available for public inspection unless the respondent requests otherwise. We will not regard a standard confidentiality statement in an email message as a request for non-disclosure. Despite this, we may be asked to disclose a confidential response under the Freedom of Information Act 2000. We may consult you if we receive such a request. Any decision we make not to disclose the response is reviewable by the Information Commissioner and the Information Rights Tribunal. You can download this Consultation Paper from our website: www.fca.org.uk. All our publications are available to download from www.fca.org.uk. If you would like to receive this paper in an alternative format, please call 020 706 0790 or email: publications_graphics@fca.org. uk or write to: Editorial and Digital team, Financial Conduct Authority, 25 The North Colonnade, Canary Wharf, London E14 5HS

CP17/26
Appendix 1
Financial Conduct Authority
Individual Accountability: Extending the Senior Managers & Certification Regime to insurers
Appendix 1
Draft Handbook text

FCA 2018/XX
INDIVIDUAL ACCOUNTABILITY (No 2) INSTRUMENT 2018 Powers exercised A. The Financial Conduct Authority makes this instrument in the exercise of the following powers and related provisions in the Financial Services and Markets Act 2000 (“the Act”):
(1) section 59 (Approval for particular arrangements); (2) section 59AB (Specifying functions as controlled functions: transitional provision); (3) section 60 (Applications for approval); (4) section 60A (Vetting candidates by authorised persons); (5) section 61 (Determination of applications); (6) section 62A (Changes to responsibilities of senior managers); (7) section 63ZA (Variation of senior manager’s approval at request of authorised person); (8) section 63ZD (Statement of policy relating to conditional approval and variation); (9) section 63C (Statement of policy); (10) section 63E (Certification of employees by authorised persons); (11) section 63F (Issuing of certificates); (12) section 64A (Rules of conduct); (13) section 64C (Requirements for authorised persons to notify regulator of disciplinary action); (14) section 69 (Statement of policy); (15) section 137A (The FCA’s general rules); (16) section 137T (General supplementary powers); (17) section 139A (Power of the FCA to give guidance); and (18) section 395 (The FCA’s and PRA’s procedures). B. The rule-making powers listed above are specified for the purpose of section 138G(2) (Rule-making instruments) of the Act. Commencement
C. This instrument comes into force on [date].
Amendments to the Handbook
D. The FCA’s Handbook of rules and guidance is amended in accordance with paragraphs E, F, G and H of this instrument. E. Amendments to the numbering and location of provisions in the Senior Management Arrangements, Systems and Controls sourcebook (SYSC) and Chapter 10C of the Supervision Manual (SUP) are set out in the tables in Annex A.

FCA 2018/XX
Except as further amended by paragraphs F and G of this instrument, the provisions in column B of the tables in Annex A otherwise remain in full force and effect. F. Cross references throughout the FCA’s Handbook to provisions listed in column A of the tables in Annex A of this instrument are amended accordingly, but only where both the existing and revised cross reference is a reference:
(a) to a chapter;
(b) to an annex;
(c) to a section; or
(d) in a form not including any sub-paragraph numbering or lettering after the letter designating the legal nature of the provision, such as a rule (designated with an “R”) or guidance (designated with a “G”). G. The modules of the FCA’s Handbook of rules and guidance listed in column (1) below (as amended, where applicable, by paragraphs E and F of this instrument) are amended or, as the case may be, further amended in accordance with the Annexes to this instrument listed in column (2) below:
(1) (2)
Glossary of definitions Annex B
Senior Management Arrangements, Systems and Controls sourcebook (SYSC)
Annex C
Code of Conduct (COCON) Annex D
Fit and Proper test for Approved Persons (FIT) Annex E Supervision manual (SUP) Annex F H. The Statements of Principle and Code of Practice for Approved Persons (APER) module of the FCA’s Handbook of rules and guidance is revoked from [date]. [Editor’s note: The second Consultation Paper will consider whether this is to be retained for some purposes]
I. The Fit and Proper test for Approved Persons and Specified significant-harm
functions (FIT) module of the FCA’s Handbook of rules and guidance is renamed the Fit and Proper test for Employees and Senior Personnel. Notes J. In this instrument, the “notes” (indicated by “Editor’s note:” or “Note:”) are intended for the convenience of the reader and do not form part of the legislative text. Citation K. This instrument may be cited as the Individual Accountability (No 2) Instrument 2018. By order of the Board [date] 2018

FCA 2018/XX
Annex A
Renumbering and deletions in the Senior Management Arrangements, Systems and Controls sourcebook (SYSC) and the Supervision manual (SUP) (A) (B) New heading, numbering and deletions
4.5 Management responsibilities maps for
UK relevant authorised persons
Deleted
Application Application and purpose
(Section heading for 25.1)
4.5.1R 25.1.1R
4.5.2R 25.1.3R
4.5.3R 25.1.2R
General rule General rule
4.5.4R 25.2.1R
4.5.5R 25.2.2R
4.5.6G(1) and (2) 25.1.6G(1) and (2)
Specific requirements Specific requirements 4.5.7R 25.2.3R 4.5.8R 25.2.4R Guidance about what should be in a management responsibilities map Guidance about what should be in a management responsibilities map (Section heading for 25.4) 4.5.9G(1) 25.4.1G 4.5.9G(2) 25.4.2G 4.5.10G 25.4.3G 4.5.11G 25.4.4G

FCA 2018/XX
(A)
(B)
New heading, numbering and deletions
4.5.12G(1) Deleted
4.5.12G(2) 25.4.5G
4.5.12G(3) 25.4.6G
4.5.12G(4) 25.4.7G
4.5.12G(5) 25.4.8G
4.5.12G(6) 25.4.11G
4.5.12G(7) 25.4.9G
4.5.12G(8) 25.4.10G
4.5.12G(9) 25.4.12G
Small firms Small firms
4.5.13G(1) 25.5.14G(1)
4.5.13G(2) 24.3.5G
Single document Management responsibilities map should be a single document 4.5.14R 25.5.1R 4.5.15G(1) to (4) 25.5.2G(1) to (4) 4.5.15G(5) 25.5.3G Purpose of SYSC 4 Annex 1G (The main business activities and functions of a relevant authorised person) Purpose of SYSC 25 Annex 1G 4.5.16G(1) Deleted 4.5.16G(2) and (3) 25.7.2G(1) and (2) 4.5.16G(4) 25.7.4G 4.5.16G(5) 25.7.3G 4.5.17G 25.7.5G

FCA 2018/XX
(A)
(B)
New heading, numbering and deletions
Contents of SYSC 4 Annex 1G (The main business activities and functions of a relevant authorised person) Contents of SYSC 25 Annex 1G 4.5.18G 25.7.6G 4.5.19G 25.7.7G 4.5.20G 25.7.8G Records Management responsibilities maps: Records (Section heading for 25.8) 4.5.21G 25.8.1G 4.5.22G 25.8.2G
4.6 Management responsibilities maps for
non-UK relevant authorised persons
Deleted
Application Deleted
4.6.1R 25.1.4R
4.6.2R Deleted
4.6.3R Deleted
4.6.4G Deleted
Purpose Deleted
4.6.5G(1) Deleted
4.6.5G(2) 25.6.3G
General rule for third-country relevant authorised persons Deleted 4.6.6R Deleted 4.6.7R Deleted 4.6.8G Deleted

FCA 2018/XX
(A)
(B)
New heading, numbering and deletions
Specific requirements for third-country relevant authorised persons Deleted 4.6.9R(1) Deleted 4.6.9R(2) 25.1.5R 4.6.10R Deleted Single document Deleted 4.6.11R Deleted Guidance about management responsibilities maps for a branch maintained by a thirdcountry relevant authorised person Deleted 4.6.12G Deleted 4.6.13G Deleted 4.6.14G Deleted Management responsibilities maps for EEA relevant authorised persons: General rule Deleted 4.6.15R Deleted 4.6.16R Deleted Responsibilities maps for EEA relevant authorised persons: purpose Deleted 4.6.17G(1) 25.6.2G(1) 4.6.17G(2) 25.6.2G(2) 4.6.17G(3) 25.1.6G(3) 4.6.17G(4) 25.6.2G(4) Responsibilities maps for EEA relevant authorised persons: detailed requirements Deleted 4.6.18R Deleted

FCA 2018/XX
(A)
(B)
New heading, numbering and deletions
4.6.19R Deleted
Responsibilities maps for EEA relevant authorised persons: leaving out information already supplied Leaving out information already supplied 4.6.20R 25.6.5R 4.6.21G 25.6.6G 4.6.22G 25.6.7G 4.6.23G 25.6.8G 4.6.24G 25.6.9G Management responsibilities maps for EEA relevant authorised persons: Single document Deleted 4.6.25R Deleted Management responsibilities maps for EEA relevant authorised persons: guidance about what should be included Deleted 4.6.26G 25.6.10G 4.6.27G Deleted 4.6.28G Deleted Management responsibilities maps for small branches maintained by non-UK relevant authorised persons Deleted 4.6.29G Deleted
4.7 Senior management responsibilities for
UK relevant authorised persons: allocation of responsibilities Deleted Application Application (Section heading for SYSC 24.1) 4.7.1R 24.1.1R

FCA 2018/XX
(A)
(B)
New heading, numbering and deletions
4.7.2R 24.1.3R
4.7.3R 24.1.2R
Purpose of this section Deleted
4.7.4G Deleted
Allocation of FCA-prescribed senior management responsibilities Allocation of FCA-prescribed senior management responsibilities 4.7.5R(1) 24.2.1R 4.7.5R(2) Deleted 4.7.5R(3) Deleted 4.7.5R(4) Deleted 4.7.5R(5) 24.2.3R(1) 4.7.5R(6) 24.2.3R(2) 4.7.5R(7) 24.2.4R 4.7.6R 24.2.5R 4.7.7R 24.2.6R 4.7.8R(1) 26.3.1R 4.7.8R(2) 26.4.2R 4.7.8R(3) 26.3.4R 4.7.9G Deleted 4.7.10G Deleted Meaning of overall responsibility Deleted 4.7.11G 26.7.2G 4.7.12G 26.6.7G 4.7.13G 26.7.4G

FCA 2018/XX
(A)
(B)
New heading, numbering and deletions
4.7.14G 26.7.5G
4.7.15G Deleted
4.7.16G Deleted
4.7.17G Deleted
4.7.18G 26.4.5G
Who functions should be allocated to Who prescribed responsibilities should be allocated to (Section heading for 24.3) 4.7.19G Deleted 4.7.20G Deleted 4.7.21G(1) Deleted 4.7.21G(2) 26.9.1G 4.7.22G Deleted 4.7.23G 26.9.4G 4.7.24G(1) 24.3.2G 4.7.24G(2) 24.3.3G(1) 4.7.24G(3) 24.3.1G 4.7.24G(4) Deleted 4.7.24G(5) 24.3.4G Dividing and sharing management functions between different people Dividing and sharing management functions between different people 4.7.25G(1) 24.3.7G 4.7.25G(2) 24.3.8G 4.7.26G 24.3.9G

FCA 2018/XX
(A)
(B)
New heading, numbering and deletions
4.7.27G 24.3.10G
4.7.28G 24.3.11G
4.7.29G 24.3.12G
Allocation of responsibilities and territorial scope Allocation of responsibilities and territorial scope 4.7.30G 24.3.13G Group management arrangements and outsourcing Group management arrangements and outsourcing (Section heading for 26.10) 4.7.31G 26.10.1G 4.7.32G 26.10.3G 4.7.33G Deleted 4.7.34G 26.10.2G Link between the senior management regime and this section Link between designated senior management functions and this chapter 4.7.35G Deleted 4.7.36G 26.11.1G(1) to (3) Link between SYSC 4 Annex 1G and this
section
Link between SYSC 25 Annex 1G and this
chapter
4.7.37G 26.11.2G
4.7.38G 26.11.3G
4.8 Senior management responsibilities
for third-country relevant authorised persons:
allocation of responsibilities
Deleted
4.8.1R Deleted
4.8.2R 26.1.5R

FCA 2018/XX
(A)
(B)
New heading, numbering and deletions
4.8.3R 26.1.4R
4.8.4R 26.1.2R
Purpose Purpose
(Section heading for SYSC 26.2)
4.8.5G 26.2.1G
Allocation of FCA-prescribed senior management responsibilities for thirdcountry relevant authorised persons Deleted 4.8.6R Deleted 4.8.7R Deleted 4.8.8G 24.3.14G 4.8.9R Deleted Local responsibility for a branch’s activities, business areas and management functions Deleted 4.8.10R(1) to (3) 26.3.2R(1) to (3) 4.8.10R(4) 26.3.3R 4.8.10R(5) Deleted 4.8.10R(6) 26.4.3R 4.8.10R(7) Deleted 4.8.11G(2) 26.6.4G(1) 4.8.11G(3) 26.6.4G(2) 4.8.11G(1), (4), (5) and (6) Deleted Meaning of local responsibility: general Deleted 4.8.12G 26.6.6G 4.8.13G(1) Deleted

FCA 2018/XX
(A)
(B)
New heading, numbering and deletions
4.8.13G(2) 26.4.4G
4.8.14G Deleted
Meaning of local responsibility in SYSC
4.8.10R(1): overall responsibility
Deleted
4.8.15G Deleted
4.8.16G Deleted
4.8.17G 26.7.3G
4.8.18G 26.7.6G
4.8.19G Deleted
Meaning of local responsibility in SYSC
4.8.10R(2)
Deleted
4.8.20G(1) 26.8.1G
4.8.20G(3) 26.8.2G
4.8.20G(2) and (4) Deleted
Who functions should be allocated to Who functions should be allocated to (Section heading for SYSC 26.9) 4.8.21G Deleted 4.8.22G 26.9.2G 4.8.23G Deleted 4.8.24G Deleted 4.8.25G Deleted 4.8.26G 26.8.4G Setting overall strategy for a branch Branches: Setting overall strategy for a branch 4.8.27G 26.8.3G

FCA 2018/XX
(A)
(B)
New heading, numbering and deletions
Not giving too much responsibility to one individual Not giving too much responsibility to one individual 4.8.28G(1) to (4) Deleted 4.8.28G(5) 26.9.5G Group arrangements and outsourcing Deleted 4.8.29G Deleted Allocation of responsibility for transactions Allocation of responsibility for transactions in branches 4.8.30G 26.5.3G Application of SYSC 4.7 to branches maintained by third-country relevant authorised persons Deleted 4.8.31R Deleted Link between the senior management regime and this section Deleted 4.8.32G Deleted 4.8.33G(1) Deleted 4.8.33G(2) 26.11.1G(4) 4.8.34G 26.11.1G(5) Link between SYSC 4 Annex 1G and this
section
Deleted
4.8.35G Deleted
4.9 Handover procedures and material Handover procedures and material
(Section heading for 25.9)
Application Application
4.9.1R(1) 25.9.1R

FCA 2018/XX
(A)
(B)
New heading, numbering and deletions
4.9.1R(2) 25.9.2R
4.9.2R Deleted
4.9.3R Deleted
Rules about handover material Rules about handover material 4.9.4R 25.9.4R 4.9.5R 25.9.5R 4.9.6G 25.9.6G 4.9.7G 25.9.7G Handover arrangements and certificates Handover arrangements and certificates 4.9.8G 25.9.8G Application of this section to other parts of a firm’s management Application of this section to other parts of a firm’s management 4.9.9G 25.9.9G 4 Annex 1G The main business activities and functions of a relevant authorised person 25 Annex 1G Examples of the business activities and functions of an SMCR firm
5.2 Certification regime Senior managers and certification regime:
Certification regime
(Chapter heading for 27)
Application Application and purpose
(Section heading for 27.1)
5.2.1R 27.1.1R
5.2.2G 27.1.2G
Purpose Purpose
5.2.3G 27.1.4G
General requirements Basic requirements

FCA 2018/XX
(A)
(B)
New heading, numbering and deletions
5.2.4G 27.2.3G
5.2.5G 27.2.2G
Fitness to act Fitness to act
5.2.6G 27.2.4G
5.2.7G 27.2.5G
5.2.8G 27.2.6G
5.2.9G 27.2.7G
5.2.10G 27.2.8G
Issuing and renewing certificates Issuing and renewing certificates 5.2.11G 27.2.9G 5.2.12G 27.2.10G 5.2.13G 27.2.11G 5.2.14G 27.2.12G 5.2.15G 27.2.13G 5.2.16G(1) 27.2.14G(1) 5.2.16G(2) 27.2.14G(4) 5.2.16G(3) 27.2.14G(5) 5.2.17G(1) 27.2.15G(1) and 27.2.15G(2) 5.2.17G(2) 27.2.15G(3) 5.2.17G(3) 27.2.15G(4) 5.2.17AG 27.2.16G Scope: general requirements General requirements 5.2.18R 27.6.1R

FCA 2018/XX
(A)
(B)
New heading, numbering and deletions
Scope: territorial scope Deleted
5.2.19R 27.3.1R
5.2.20G 27.3.2G
5.2.20AG 27.3.3G
Scope: employees Employees
5.2.21G 27.4.1G
5.2.22G 27.4.2G
Scope: effect of PRA requirements Effect of PRA requirements 5.2.23G 27.4.3G Scope: exclusions Exclusions 5.2.24G 27.4.4G 5.2.25R 27.4.5R 5.2.26R 27.4.6R Scope: emergency appointments Emergency appointments 5.2.27R 27.5.1R 5.2.28G 27.5.2G Scope: temporary UK role (the 30-day rule) Temporary UK role (the 30-day rule) 5.2.28AR 27.5.3R 5.2.28BG 27.5.4G 5.2.28C(1)G 27.5.5G 5.2.28C(2)G 27.5.6G Scope: FCA-specified significant-harm functions FCA-specified significant-harm functions 5.2.29R 27.6.2R

FCA 2018/XX
(A)
(B)
New heading, numbering and deletions
5.2.30R 27.6.3R
5.2.31G 27.6.4G
CASS oversight function CASS oversight function 5.2.32R 27.7.1R 5.2.32AR 27.7.2G Benchmark submission and administration function Benchmark submission and administration function 5.2.33R 27.7.3R Proprietary trader function Proprietary trader function 5.2.34R 27.7.4R Significant management function Significant management function 5.2.35R 27.7.5R 5.2.36G 27.7.6G 5.2.37G 27.7.9G 5.2.38G 27.7.10G Functions requiring qualifications Functions requiring qualifications 5.2.39R 27.7.11R 5.2.40G 27.7.12G Managers of certification employees Managers of certification employees 5.2.41R 27.7.13R Material risk takers Material risk takers 5.2.42R Deleted 5.2.43G Deleted Client-dealing function Client-dealing function

FCA 2018/XX
(A)
(B)
New heading, numbering and deletions
5.2.44R 27.7.18R
5.2.45R 27.7.19R
5.2.46G 27.7.20G
5.2.47G 27.7.21G
5.2.48G 27.7.22G
Algorithmic trading function Algorithmic trading function 5.2.49R 27.7.23R 5.2.50R 27.7.24R 5.2.51G 27.7.25G 5.2.52G 27.7.26G 5.2.53G 27.7.27G 5.2.54G 27.7.28G 5.2.55G 27.7.29G 5.2.56G 27.7.30G 5.2.57G 27.7.31G 5 Annex 1G Examples of how the temporary UK role rule in SYSC 5.2.28A (the 30-day rule) works 27 Annex 1G Examples of how the temporary UK role rule in SYSC 5.2.28AR (the 30-day rule) works Renumbering in SUP 10C (A) (B) New heading, numbering and deletions Chairman of the nomination committee function (SMF13) Chairman of the nomination committee function (SMF13) 10C.5.2R 10C.5A.2R

FCA 2018/XX
Renumbering in SUP 10C
(A)
(B)
New heading, numbering and deletions
10C.5.3G 10C.5A.3G
10C.5.4G 10C.5A.4G
Non-executive directors Non-executive directors 10C.5.6G 10C.5A.1G

FCA 2018/XX
Annex B
Amendments to the Glossary of definitions In this Annex, underlining indicates new text and striking through indicates deleted text, unless otherwise stated. Insert the following new definitions in the appropriate alphabetical position. The text is not underlined. chairman of the audit committee function FCA controlled function SMF11 in the table of FCA-designated senior management functions, described more fully in SUP 10C.5A.8R. chairman of the remuneration committee function FCA controlled function SMF12 in the table of FCA-designated senior management functions, described more fully in SUP 10C.5A.10R. chairman of the risk committee function FCA controlled function SMF10 in the table of FCA-designated senior management functions, described more fully in SUP 10C.5A.6R. chairman function FCA controlled function SMF9 in the table of FCA-designated senior management functions, described more fully in SUP 10C.5A.5R. chief finance officer function FCA controlled function SMF2 in the table of FCA-designated senior management functions, described more fully in SUP 10C.6A.3R. chief operations function FCA controlled function SMF24 in the table of FCA-designated senior management functions, described more fully in SUP 10C.6B.1R. chief risk officer function FCA controlled function SMF4 in the table of FCA-designated senior management functions, described more fully in SUP 10C.6A.4R. compliance requirements for SMCR firms any of the following requirements:
(a) SYSC 3.2.8R (The compliance function); (b) SYSC 6.1 (Compliance); (c) article 22 of the MiFID Org Regulation (Compliance); (d) article 22 of the MiFID Org Regulation (as applied in accordance with SYSC 1 Annex 1 2.8AR, SYSC 1 Annex 1

FCA 2018/XX
3.2-AR, SYSC 1 Annex 1 3.2-BR, SYSC 1 Annex 1 3.2CR and SYSC 1 Annex 1 3.3R); or (e) article 61 of the AIFMD level 2 regulation (Permanent compliance function). conduct risk oversight (Lloyd’s) function FCA controlled function SMF23b in the table of FCA-designated senior management functions, described more fully in SUP 10C.6.6R. core SMCR firm a firm identified as a core SMCR firm in the decision tree in SYSC 23 Annex 1 (Definition of SMCR firm and different types of SMCR firms) EEA SMCR dual regulated banking sector firm an incoming EEA firm or incoming Treaty firm that meets the following conditions:
(a) it has a branch in the United Kingdom; (b) it does not have permission for effecting contracts of insurance or carrying out contracts of insurance; and (c) it meets one of the following conditions:
(i) it is a credit institution which has a permission under
Part 4A, Schedule 3 or Schedule 4 of the Act that
includes accepting deposits; or
(ii) it meets all the following conditions:
(A) the institution is an investment firm; (B) it has a permission under Part 4A, Schedule 3 or Schedule 4 of the Act that covers dealing in investments as principal; and (C) when carried on by it, that activity is a PRAregulated activity. EEA core SMCR firm a core SMCR firm that is an incoming EEA firm or incoming Treaty firm. EEA SMCR firm an SMCR firm that is an incoming EEA firm or incoming Treaty firm. enhanced scope SMCR firm a firm identified as an enhanced scope SMCR firm in the decision tree in SYSC 23 Annex 1 (Definition of SMCR firm and different types of SMCR firms). executive director function FCA controlled function SMF3 in the table of FCA-designated senior management functions, described more fully in SUP

FCA 2018/XX
10C.5.1R to 10C.5.9R. group entity senior manager function FCA controlled function SMF7 in the table of FCA-designated senior management functions, described more fully in SUP 10C.5B.1R. head of internal audit function FCA controlled function SMF5 in the table of FCA-designated senior management functions, described more fully in SUP 10C.6A.6R. head of third country branch function FCA controlled function SMF19 in the table of FCA-designated senior management functions, described more fully in SUP 10C.5.15R. internal audit requirements for SMCR firms any of the following requirements:
(a) SYSC 3 (Systems and controls) insofar as it relates to internal audit; (b) SYSC 6.2 (Internal audit); (c) article 24 of the MiFID Org Regulation (Internal audit); (d) article 24 of the MiFID Org Regulation (Internal audit) (as applied in accordance with SYSC 1 Annex 1 2.8AR, SYSC 1
Annex 1 3.2-AR, SYSC 1 Annex 1 3.2-BR, SYSC 1 Annex 1
3.2CR and SYSC 1 Annex 1 3.3R); or
(e) article 62 of the AIFMD level 2 regulation (Permanent internal audit function). limited scope core SMCR firm a firm identified as a limited scope core SMCR firm in the decision tree in SYSC 23 Annex 1 (Definition of SMCR firm and different types of SMCR firms). limited scope function FCA controlled function SMF29 in the table of FCA-designated senior management functions, described more fully in SUP 10C.6.4R. non-SMF board director subject to competence requirements (in relation to a firm) a board director of the firm who meets the following conditions:
(a) they are not an SMF manager of the firm; and (b) the firm is required to assess their fitness and propriety under the competent employee rule, any directly applicable EU legislation or any other requirement of the regulatory

FCA 2018/XX system. non-UK core SMCR firm a core SMCR firm that is an overseas firm. non-UK SMCR firm an SMCR firm that is an overseas firm. risk control requirements for SMCR firms any of the following requirements:
(a) SYSC 3 (Systems and Controls) insofar as it relates to risk controls; (b) SYSC 7.1.6R, SYSC 7.1.21R and SYSC 7.1.22R; (c) COLL 6.11 (Risk control and internal reporting); (d) article 23 of the MiFID Org Regulation (Risk management); (e) article 23(2) of the MiFID Org Regulation (as applied in accordance with SYSC 1 Annex 1 2.8AR, SYSC 1 Annex 1 3.2-AR, SYSC 1 Annex 1 3.2-BR, SYSC 1 Annex 1 3.2CR and SYSC 1 Annex 1 3.3R); or (f) articles 38 to 45 of the AIFMD level 2 regulation (Risk management). senior independent director function FCA controlled function SMF14 in the table of FCA-designated senior management functions, described more fully in SUP 10C.5A.14R. SMCR dual regulated banking sector firm any of the following:
(a) a UK SMCR dual regulated banking sector firm; (b) an EEA SMCR dual regulated banking sector firm; or (c) a third-country SMCR dual regulated banking sector firm. SMCR financial activities any of the following:
(a) regulated activities;
(b) an activity carried on in connection with a regulated activity (whether current, past or contemplated); (c) an activity held out as being for the purposes of a regulated activity (whether current, past or contemplated);

FCA 2018/XX
(d) activities that constitute dealing in investments as principal, disregarding the exclusion in article 15 of the Regulated Activities Order (Absence of holding out etc); or (e) activities listed in points 2 to 15 of Annex I to the CRD (List of activities subject to mutual recognition). SMCR firm a firm identified as an SMCR firm in the decision tree in SYSC 23
Annex 1 (Definition of SMCR firm and different types of SMCR
firms)
table of FCAdesignated senior
management functions the table of FCA-designated senior management functions in SUP 10C.4.3R. third-country SMCR dual regulated banking sector firm a non-UK institution other than an incoming firm that meets the following conditions:
(a) it has a branch in the United Kingdom; (b) it is not an institution that has permission for effecting contracts of insurance or carrying out contracts of insurance; and (c) it meets one of the following conditions:
(i) it is a credit institution which has a Part 4A permission that includes accepting deposits; or (ii) it meets all the following conditions:
(A) the institution is an investment firm; (B) its Part 4A permission covers dealing in investments as principal; and (C) when carried on by it, that activity is a PRAregulated activity. UK SMCR dual regulated banking sector firm an institution that meets the following conditions:
(a) it is incorporated in, or formed under the law of any part of, the United Kingdom; (b) it does not have permission for effecting contracts of insurance or carrying out contracts of insurance; (c) it meets one of the following conditions:

FCA 2018/XX
(i) its Part 4A permission includes accepting deposits; or (ii) it meets all the following conditions:
(A) the institution is an investment firm; and (B) its Part 4A permission covers dealing in investments as principal; and (C) when carried on by it, that activity is a PRAregulated activity. UK core SMCR firm a core SMCR firm that is a UK domestic firm. UK SMCR firm (a) a UK SMCR dual regulated banking sector firm; or (b) any other SMCR firm that is a UK domestic firm. Amend the following definitions as shown. certification employee (as described in more detail in section 63E(1) of the Act (Certification of employees by relevant authorised person)) an employee (as defined) of a relevant an authorised person who has a valid certificate issued by that relevant authorised person. This definition is not relevant to a firm that is not an SMCR firm. chair chairman of the nomination committee function (1) (for a relevant authorised person) FCA controlled function SMF13 in Part 1 of the table in SUP 10C.4.3R (Table of FCA-designated senior management functions for relevant authorised persons) table of FCA-designated senior management functions, described more fully in SUP 10C.5A.2R; . (2) (for certain Solvency II firms including a large non-directive insurer) the FCA controlled function CF2a in Part 2 of the
table of FCA controlled functions, described more fully in
SUP 10A.6.15AR. chair chairman of the with-profits committee function (for certain Solvency II firms) FCA controlled function CF 2b SMF15 in Part 2 of the table of FCA controlled FCA-designated senior management functions, described more fully in SUP 10A.6.15BR SUP 10C.5A.12R to SUP 10C.5A.13R. chief executive function FCA controlled function CF3 SMF1 in Part 1 and Part 2 of the table of FCA controlled FCA-designated senior management functions, described more fully in SUP 10A.6.17R SUP 10C.5.12R.

FCA 2018/XX compliance oversight function (1) (for relevant authorised persons) FCA controlled function SMF16 in Part 1 of the table in SUP 10C.4.3R (Table of FCA controlled functions for relevant authorised persons)
table of FCA-designated senior management functions,
described more fully in SUP 10C.6.1R. ; and (2) (for other firms) FCA controlled function CF10 in Parts 1 and 2 of the table of FCA controlled functions, described more fully in SUP 10A.7.8R. controlled function a function, relating to the carrying on of a regulated activity by a firm, which is specified by:
(a) either the FCA in:
(i) (for relevant authorised persons) the tables in SUP 10C.4.3R (Table of FCA controlled functions for relevant authorised persons) table of FCA-designated senior management functions; or (ii) (for other firms) the table of FCA controlled functions; or (b) the PRA in:
(i) (for relevant authorised persons CRR firms, credit unions and third country CRR firms (as defined in the PRA Rulebook)) the part of the PRA’s rulebook PRA Rulebook titled ‘Senior Management Functions’, which specifies controlled functions); or (ii) (for Solvency II firms including large non-directive insurers, and for small non-directive insurers) the Senior Insurance Management Functions parts of the PRA Rulebook: Rulebook applicable to Solvency II Firms and Non-Solvency II Firms; or (iii) ; or under section 59 of the Act (Approval for particular arrangements). EEA branch senior manager function FCA controlled function SMF21 in Part 2 of the table in SUP 10C.4.3R (Table of FCA controlled functions for relevant authorised persons) table of FCA-designated senior management functions, described more fully in SUP 10C.8.4R. employee … (3) (for the purposes of SYSC 5.2 (Certification regime) SYSC 27 (Senior management and certification regime:
Certification regime) and the definition of certification

FCA 2018/XX employee) has the meaning in section 63E(9) of the Act (Certification of employees by relevant authorised persons) which, in summary, says an employee of a person (the “employer”) includes a reference to a person who:
…
…
(4A) (for the purposes of SYSC 22 (Regulatory references)) has the same meaning as in (3) and, in addition, includes a person who:
…
(c) …
(iii) a person who performs a function of that group member under an arrangement entered into by the group member or a contractor of the group member; or (d) is a board director of a person (the “employer”) who is not an SMF manager or certification employee of that person. FCA controlled function a controlled function which is specified by the FCA under section 59 of the Act (Approval for particular arrangements) in:
(a) (for relevant authorised persons) the tables in SUP 10C.4.3R (Table of FCA-designated senior management functions for relevant authorised persons); or (b) (for other firms) the table of FCA controlled FCAdesignated senior management functions. FCA governing functions any of the following FCA controlled functions labelled as FCA governing functions in the table of FCA-designated senior management functions. :
(a) (for relevant authorised persons) FCA controlled functions SMF3 and SMF13 in Parts 1 and 3 of the table in SUP 10C.4.3R (Table of FCA-designated senior management functions for relevant authorised persons); (b) (for a Solvency II firm, including a large non-directive insurer) FCA controlled functions CF1, CF2a, CF2b, CF5 and, for large non-directive insurers only, CF6, in Part 2 of the table of FCA controlled functions; and (c) (for a small non-directive insurer) FCA controlled functions CF1, CF3, CF5 and CF6 in Part 2 of the table of FCA

FCA 2018/XX controlled functions; and
(d) (for other firms and appointed representatives) FCA controlled functions 1 to 6 in Part 1 of the table of FCA controlled functions. FCA-prescribed senior management responsibilities (a) (for UK relevant authorised persons) the responsibilities in SYSC 4.7.7R (Table: FCA-prescribed senior management responsibilities); (b) (for third-country relevant authorised persons) the responsibilities in SYSC 4.8.9R SYSC 24.2.6R (Table: FCAprescribed senior management responsibilities for thirdcountry relevant authorised persons). FCA required functions any of the following FCA controlled functions labelled as FCA required functions in the table of FCA-designated senior management functions. :
(a) (for relevant authorised persons) FCA controlled functions SMF16 and SMF17 in Parts 1 to 3 of the table in SUP 10C.4.3R (Table of FCA-designated senior management functions for relevant authorised persons); and (b) (for other firms) FCA controlled functions 8 to 11 in Part 1 or Part 2 of the table of FCA controlled functions. FIT the part of the Handbook in High Level Standards which has the title the Fit and Proper test for Approved Persons and Specified significant-harm functions Employees and Senior Personnel. management responsibilities map the document document describing the management arrangements of a relevant authorised person certain SMCR firms required by SYSC 4.5.4R, SYSC 4.6.6R or SYSC 4.6.15R SYSC 25 (Senior management and certification regime: Management responsibilities maps and handover procedures and material). money laundering reporting function (1) (for relevant authorised persons) FCA controlled function SMF17 in Parts 1 to 3 of the table in SUP 10C.4.3R (Table of FCA-designated senior management functions for relevant authorised persons) table of FCA-designated senior management functions, described more fully in SUP 10C.6.2R. ; and (2) (for other firms) FCA controlled function CF11 in Parts 1 and 2 of the table of FCA controlled functions, described more fully in SUP 10A.7.10R. other local responsibility function FCA controlled function SMF22 in Part 3 of the table in SUP 10C.4.3R (Table of FCA controlled functions for relevant authorised persons) table of FCA-designated senior management

FCA 2018/XX functions, described more fully in SUP 10C.8.1R. other overall responsibility function FCA controlled function SMF18 in Part 1 of the table in SUP 10C.4.3R (Table of FCA-designated senior management functions for relevant authorised persons) table of FCA-designated senior management functions, described more fully in SUP 10C.7.1R. partner function FCA controlled function CF4 SMF27 in Part 1 of the table of FCA controlled FCA-designated senior management functions, described more fully in SUP 10A.6.23R to SUP 10A.6.27R SUP 10C.5.16R to SUP 10C.5.20R. PRA controlled function a controlled function which is specified by the PRA under section 59 of the Act (Approval for particular arrangements) in:
(1) (for relevant authorised persons CRR firms, credit unions and third country CRR firms (as defined in the PRA Rulebook)) the part of the PRA’s rulebook PRA Rulebook titled ‘Senior Management Functions’. ;or (2) (for Solvency II firms including large non-directive insurers, and for small non-directive insurers) the Senior Insurance Management Functions parts of the PRA Rulebook: Rulebook applicable to Solvency II Firms and Non-Solvency II Firms. ; or (3) [deleted]. PRA-prescribed senior management responsibilities one of the functions described as:
(1) (for CRR firms, credit unions and third country CRR firms (as defined in the PRA Rulebook)):
(a) a ‘prescribed responsibility’ in Chapter 4; or (b) a ‘small firm prescribed responsibility’ in Chapter 5; or (c) a ‘UK branch prescribed responsibility:’ in Chapter 6; of the part of the PRA’s rulebook PRA Rulebook called Allocation of Responsibilities; (2) (for firms covered by the Insurance - Allocation of Responsibilities and Large Non-Solvency II Firms – Allocation of Responsibilities parts of the PRA Rulebook) an SIMR prescribed responsibility as defined in those parts;

FCA 2018/XX and
(3) (for firms covered by the Non-solvency II Firms - Allocation of Responsibilities part of the PRA Rulebook) a small nondirective insurer prescribed responsibility as defined in that
part.
relevant senior management application has the meaning in section 61(1)(b) of the Act (Determination of applications) which, in summary, is an application for approval to perform a designated senior management function in relation to the carrying on of a regulated activity by a relevant an authorised person. This definition is not relevant to a firm that is not an SMCR firm. senior conduct rules staff member (in COCON) a person who:
(a) comes within row (1) of the table in COCON 1.1.2R (an SMF manager); (b) comes within row (2) of the table in COCON 1.1.2R (an employee of a relevant authorised person an SMCR firm who performs the function of an SMF manager; or (c) meets the following conditions: [deleted] (i) they come within row (7) of the table in COCON 1.1.2R (an approved person performing a controlled function (including a PRA controlled function) in a Solvency II firm (including a large non-directive insurer) or a small non-directive insurer); and (ii) that controlled function is a significant-influence function; or (d) a non-executive director who comes within row (8) of the
table in COCON 1.1.2R (a board standard non-executive
director of a relevant authorised person, a Solvency II firm (including a large non-directive insurer) or a small nondirective insurer UK SMCR firm). significant-harm function a function defined in section 63E(5) of the Act (Certification of employees by relevant authorised persons) which is, in summary (in relation to the carrying on of a regulated activity by a relevant an authorised person), a function that meets the following conditions:
(a) it requires the person performing it to be involved in one or more aspects of the relevant authorised person's affairs, so far as relating to the activity; and

FCA 2018/XX
(b) those aspects involve, or might involve, a risk of significant harm to the relevant authorised person or to anyone who is using, or who is or may be contemplating using, any of the services provided by the relevant authorised person. This definition is not relevant to a firm that is not an SMCR firm. SMF manager (in relation to a relevant authorised person an SMCR firm) a person who has approval under section 59 of the Act (Approval for particular arrangements) to perform a designated senior management function in relation to the carrying on by that relevant authorised person SMCR firm of a regulated activity. Solvency II firm a firm which is any of:
…
(f) in SUP TP 7 and SUP TP 8, SYSC, COCON, APER, SUP 10A SUP 10C and DEPP only, a large non-directive insurer; … staff being assessed under FIT (in FIT and in relation to a relevant authorised person: an SMCR firm) those persons set out in FIT 1.1.1G(4) to (9). (a) any of the following whose fitness is being assessed by the FCA or the relevant authorised person:
(i) an FCA-approved SMF manager; or
(ii) a candidate for an FCA-designated senior management function; or (b) a person whose fitness to perform an FCA-specified significant harm function is being assessed by the relevant authorised person under section 63F of the Act (Issuing of certificates), whether or not that person is already a certification employee in relation to that FCA-specified significant harm function. Delete the following definitions. The text is not shown struck through. APER the part of the Handbook in High Level Standards which has the title Statements of Principle and Code of Practice for Approved Persons. apportionment and oversight function FCA controlled function CF8 in Parts 1 and Part 2 of the table of FCA controlled functions, described more fully in SUP 10A.7.1R.

FCA 2018/XX
EEA relevant authorised person an incoming firm which is a relevant authorised person in accordance with article 2 of the Financial Services and Markets Act 2000 (Relevant Authorised Persons) Order 2015 which, in summary, is an incoming EEA firm or incoming Treaty firm that meets the following conditions:
(a) it has a branch in the United Kingdom; (b) it does not have permission for effecting contracts of insurance or carrying out contracts of insurance; and (c) it meets one of the following conditions:
(i) it is a credit institution which has a permission under
Part 4A, Schedule 3 or Schedule 4 of the Act that
includes accepting deposits; or
(ii) it meets all the following conditions:
(A) the institution is an investment firm; (B) it has a permission under Part 4A, Schedule 3 or Schedule 4 of the Act that covers dealing in investments as principal; and (C) when carried on by it, that activity is a PRAregulated activity. full scope regulatory reference firm for the purpose of SYSC 22 (Regulatory references):
(a) a relevant authorised person;
(b) a Solvency II firm; or
(c) a large non-directive insurer. non-executive director function FCA controlled function CF2 in Part 1 of the table of FCA controlled functions, described more fully in SUP 10A.6.12R and SUP 10A.6.13R. non-UK relevant authorised person (a) an EEA relevant authorised person; or (b) a third-country relevant authorised person. PRA-prescribed UK branch senior management responsibility a “UK branch prescribed responsibility” in Chapter 6 of the part of the PRA’s rulebook called Allocation of Responsibilities.

FCA 2018/XX relevant authorised person
(a) an EEA relevant authorised person; or (b) a third country relevant authorised person; or (c) a UK relevant authorised person. systems and controls function FCA controlled function CF28 in Part 1 and, for a Solvency II firm which is a third-country insurance or reinsurance undertaking or an insurance special purpose vehicle, Part 2 of the table of FCA controlled functions, described more fully in SUP 10A.8.1R and SUP 10A.8.1AR. third-country relevant authorised person a non-UK institution other than an incoming firm which is a relevant authorised person in accordance with article 2 of the Financial Services and Markets Act 2000 (Relevant Authorised Persons) Order 2015 which, in summary, is a non-UK institution other than an incoming firm that meets the following conditions:
(a) it has a branch in the United Kingdom; (b) it is not an institution that has permission for effecting contracts of insurance or carrying out contracts of insurance; and (c) it meets one of the following conditions:
(i) it is a credit institution which has a Part 4A permission that includes accepting deposits; or (ii) it meets all the following conditions:
(A) the institution is an investment firm; (B) its Part 4A permission covers dealing in investments as principal; and (C) when carried on by it, that activity is a PRAregulated activity. UK relevant authorised person has the meaning in section 71A of the Act (‘relevant authorised person’) which, in summary, is an institution that meets the following conditions:
(a) it is incorporated in, or formed under the law of any part of, the United Kingdom; (b) it does not have permission for effecting contracts of insurance or carrying out contracts of insurance; and (c) it meets one of the following conditions:

FCA 2018/XX
Annex C
Amendments to the Senior Management Arrangements, Systems and Controls sourcebook (SYSC) In this Annex, underlining indicates new text and striking through indicates deleted text, unless otherwise stated. 3 Systems and Controls controls …
3.2 Areas covered by systems and controls
…
The compliance function
…
3.2.8 R (1) A firm which carries on designated investment business with or for
retail clients or professional clients must allocate to a director or senior manager the function of:
(a) having responsibility for oversight of the firm’s compliance; and (b) reporting to the governing body in respect of that responsibility. (2) In (1) "compliance" means compliance with the rules in the firm’s obligations under the regulatory system in relation to which the FCA has responsibility. :
(a) COBS (Conduct of Business);
(b) COLL ( Collective Investment Schemes sourcebook); and (c) CASS (Client Assets)
3.2.9 G (1) SUP 10A.7.8R SUP 10C.6.1R uses SYSC 3.2.8R to describe the
controlled function, known as the compliance oversight function, of acting in the capacity of a director or senior manager to whom this function is allocated. (2) The rules referred to in SYSC 3.2.8R(2) are the minimum area of focus for the firm’s compliance oversight function. A firm is free to give additional responsibilities to a person performing this function if it wishes.

FCA 2018/XX
Conduct risk oversight (Lloyd’s) function 3.2.9A R In relation to business done at Lloyd’s, the Society must allocate to a director or senior manager the function of having responsibility for overseeing the conduct of business standards required of managing agents for which the Society has responsibility. … In the text shown amended below, ‘Editor’s notes’ are included for the benefit of the reader and do not form part of the legislative text. The text of provisions marked only as ‘deleted’ is not shown struck through elsewhere in the instrument.
4.5 Management responsibilities maps for UK relevant authorised persons
Application
4.5.1 R [deleted] [Editor’s note: The text of this provision has been moved to SYSC
25.1.1R]
4.5.2 R [deleted] [Editor’s note: The text of this provision has been moved to SYSC
25.1.3R]
4.5.3 R [deleted] [Editor’s note: The text of this provision has been moved to SYSC
25.1.2R]
General rule
4.5.4 R [deleted] [Editor’s note: The text of this provision has been moved to SYSC
25.2.1R]
4.5.5 R [deleted] [Editor’s note: The text of this provision has been moved to SYSC
25.2.2R]
4.5.6 G (1) [deleted] [Editor’s note: The text of this provision has been moved
to SYSC 25.1.6G(1)]
(2) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 25.1.6G(2)] Specific requirements
4.5.7 R [deleted] [Editor’s note: The text of this provision has been moved to SYSC
25.2.3R]
4.5.8 R [deleted] [Editor’s note: The text of this provision has been moved to SYSC
25.2.4R]

FCA 2018/XX
Guidance about what should be in a management responsibilities map
4.5.9 G (1) [deleted] [Editor’s note: The text of this provision has been moved
to SYSC 25.4.1G]
(2) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 25.4.2G]
4.5.10 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
25.4.3G]
4.5.11 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
25.4.4G]
4.5.12 G (1) [deleted]
(2) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 25.4.5G] (3) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 25.4.6G] (4) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 25.4.7G] (5) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 25.4.8G] (6) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 25.4.11G] (7) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 25.4.9G] (8) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 25.4.10G] (9) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 25.4.12G] Small firms
4.5.13 G (1) [deleted] [Editor’s note: The text of this provision has been moved
to SYSC 25.5.14G(1)]
(2) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 24.3.5G] Single document
4.5.14 R [deleted] [Editor’s note: The text of this provision has been moved to SYSC
25.5.1R]

FCA 2018/XX
4.5.15 G (1) [deleted] [Editor’s note: The text of this provision has been moved
to SYSC 25.5.2G(1)]
(2) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 25.5.2G(2)] (3) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 25.5.2G(3)] (4) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 25.5.2G(4)] (5) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 25.5.3G] Purpose of SYSC 4 Annex 1G (The main business activities and functions of a relevant authorised person)
4.5.16 G (1) [deleted]
(2) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 25.7.2G(1)] (3) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 25.7.2G(2)] (4) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 25.7.4G] (5) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 25.7.3G]
4.5.17 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
25.7.5G]
Contents of SYSC 4 Annex 1G (The main business activities and functions of a relevant authorised person)
4.5.18 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
25.7.6G]
4.5.19 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
25.7.7G]
4.5.20 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
25.7.8G]
Records
4.5.21 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
25.8.1G]

FCA 2018/XX
4.5.22 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
25.8.2G]
4.6 Management responsibilities maps for non-UK relevant authorised persons
Application
4.6.1 R [deleted] [Editor’s note: The text of this provision has been moved to SYSC
25.1.4R]
4.6.2 R [deleted]
4.6.3 R [deleted]
4.6.4 G [deleted]
Purpose
4.6.5 G (1) [deleted]
(2) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 25.6.3G] General rule for third-country relevant authorised persons
4.6.6 R [deleted]
4.6.7 R [deleted]
4.6.8 G [deleted]
Specific requirements for third-country relevant authorised persons
4.6.9 R (1) [deleted]
(2) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 25.1.5R]
4.6.10 R [deleted]
Single document
4.6.11 R [deleted]
Guidance about management responsibilities maps for a branch maintained by a third-country relevant authorised person
4.6.12 G [deleted]
4.6.13 G [deleted]

FCA 2018/XX
4.6.14 G [deleted]
Management responsibilities maps for EEA relevant authorised persons: General rule
4.6.15 R [deleted]
4.6.16 R [deleted]
Responsibilities maps for EEA relevant authorised persons: purpose
4.6.17 G (1) [deleted] [Editor’s note: The text of this provision has been moved
to SYSC 25.6.2G(1)]
(2) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 25.6.2G(2)] (3) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 25.1.6G(3)] (4) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 25.6.2G(4)] Responsibilities maps for EEA relevant authorised persons: detailed requirements
4.6.18 R [deleted]
4.6.19 R [deleted]
Responsibilities maps for EEA relevant authorised persons: leaving out information already supplied
4.6.20 R [deleted] [Editor’s note: The text of this provision has been moved to SYSC
25.6.5R]
4.6.21 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
25.6.6G]
4.6.22 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
25.6.7G]
4.6.23 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
25.6.8G]
4.6.24 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
25.6.9G]
Management responsibilities maps for EEA relevant authorised persons: Single document
4.6.25 R [deleted]

FCA 2018/XX
Management responsibilities maps for EEA relevant authorised persons: guidance about what should be included
4.6.26 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
25.6.10G]
4.6.27 G [deleted]
4.6.28 G [deleted]
Management responsibilities maps for small branches maintained by non-UK relevant authorised persons
4.6.29 G [deleted]
4.7 Senior management responsibilities for UK relevant authorised persons:
allocation of responsibilities
Application
4.7.1 R [deleted] [Editor’s note: The text of this provision has been moved to SYSC
24.1.1R]
4.7.2 R [deleted] [Editor’s note: The text of this provision has been moved to SYSC
24.1.3R]
4.7.3 R [deleted] [Editor’s note: The text of this provision has been moved to SYSC
24.1.2R]
Purpose of this section
4.7.4 G [deleted]
Allocation of FCA-prescribed senior management responsibilities
4.7.5 R (1) [deleted] [Editor’s note: The text of this provision has been moved
to SYSC 24.2.1R]
(2) [deleted]
(3) [deleted]
(4) [deleted]
(5) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 24.2.3R(1)] (6) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 24.2.3R(2)]

FCA 2018/XX
(7) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 24.2.4R]
4.7.6 R [deleted] [Editor’s note: The text of this provision has been moved to SYSC
24.2.5R]
4.7.7 R [deleted] [Editor’s note: The text of this provision has been moved to SYSC
24.2.6R]
Allocation of overall responsibility for a firm’s activities, business areas and management functions
4.7.8 R (1) [deleted] [Editor’s note: The text of this provision has been moved
to SYSC 26.3.1R]
(2) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 26.4.2R] (3) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 26.3.4R]
4.7.9 G [deleted]
4.7.10 G [deleted]
Meaning of overall responsibility
4.7.11 G [deleted] [Editor’s note: The text of this provision has been moved to
SYSC 26.7.2G]
4.7.12 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
26.6.7G]
4.7.13 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
26.7.4G]
4.7.14 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
26.7.5G]
4.7.15 G [deleted]
4.7.16 G [deleted]
4.7.17 G [deleted]
4.7.18 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
26.4.5R]
Who functions should be allocated to
4.7.19 G [deleted]

FCA 2018/XX
4.7.20 G [deleted]
4.7.21 G (1) [deleted]
(2) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 26.9.1G]
4.7.22 G [deleted]
4.7.23 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
26.9.4G]
4.7.24 G (1) [deleted] [Editor’s note: The text of this provision has been moved
to SYSC 24.3.2G]
(2) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 24.3.3G(1)] (3) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 24.3.1G] (4) [deleted] (5) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 24.3.4G] Dividing and sharing management functions between different people
4.7.25 G (1) [deleted] [Editor’s note: The text of this provision has been moved
to SYSC 24.3.7G]
(2) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 24.3.8G]
4.7.26 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
24.3.9G]
4.7.27 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
24.3.10G]
4.7.28 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
24.3.11G]
4.7.29 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
23.1.12G]
Allocation of responsibilities and territorial scope.
4.7.30 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
24.3.13G]
Group management arrangements and outsourcing

FCA 2018/XX
4.7.31 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
26.10.1G]
4.7.32 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
26.10.3G]
4.7.33 G [deleted]
4.7.34 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
26.10.2G]
Link between the senior management regime and this section
4.7.35 G [deleted]
4.7.36 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
26.11.1G(1) to (3)]
Link between SYSC 4 Annex 1G and this section
4.7.37 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
26.11.2G]
4.7.38 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
26.11.3G]
4.8 Senior management responsibilities for third-country relevant authorised
persons: allocation of responsibilities
4.8.1 R [deleted]
4.8.2 R [deleted] [Editor’s note: The text of this provision has been moved to SYSC
26.1.5R]
4.8.3 R [deleted] [Editor’s note: The text of this provision has been moved to SYSC
26.1.4R]
4.8.4 R [deleted] [Editor’s note: The text of this provision has been moved to SYSC
26.1.2R]
Purpose
4.8.5 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
26.2.1G]
Allocation of FCA-prescribed senior management responsibilities for thirdcountry relevant authorised persons
4.8.6 R [deleted]

FCA 2018/XX
4.8.7 R [deleted]
4.8.8 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
24.3.14G]
4.8.9 R [deleted]
Local responsibility for a branch’s activities, business areas and management functions
4.8.10 R (1) [deleted] [Editor’s note: The text of this provision has been moved
to SYSC 26.3.2R(1)]
(2) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 26.3.2R(2)] (3) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 26.3.2R(3)] (4) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 26.6.3R] (5) [deleted] (6) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 26.4.3R] (7) [deleted]
4.8.11 G (1) [deleted]
(2) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 26.6.4G(1)] (3) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 26.6.4G(2)] (4) [deleted] (5) [deleted] (6) [deleted] Meaning of local responsibility: general
4.8.12 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
26.6.6G]
4.8.13 G (1) [deleted]
(2) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 26.4.4G]

FCA 2018/XX
4.8.14 G [deleted]
Meaning of local responsibility in SYSC 4.8.10R(1): overall responsibility
4.8.15 G [deleted]
4.8.16 G [deleted]
4.8.17 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
26.7.3G]
4.8.18 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
26.7.6G]
4.8.19 G [deleted]
Meaning of local responsibility in SYSC 4.8.10R(2)
4.8.20 G (1) [deleted] [Editor’s note: The text of this provision has been moved
to SYSC 26.8.1G]
(2) [deleted]
(3) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 26.8.2G] (4) [deleted] Who functions should be allocated to
4.8.21 G [deleted]
4.8.22 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
26.9.2G]
4.8.23 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
26.9.1G]
4.8.24 G [deleted]
4.8.25 G [deleted]
4.8.26 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
26.8.4G]
Setting overall strategy for a branch
4.8.27 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
26.8.3G]
Not giving too much responsibility to one individual

FCA 2018/XX
4.8.28 G (1) [deleted]
(2) [deleted]
(3) [deleted]
(4) [deleted]
(5) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 26.9.5G] Group arrangements and outsourcing
4.8.29 G [deleted]
Allocation of responsibility for transactions
4.8.30 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
26.5.3G]
Application of SYSC 4.7 to branches maintained by third-country relevant authorised persons
4.8.31 R [deleted]
Link between the senior management regime and this section
4.8.32 G [deleted]
4.8.33 G (1) [deleted]
(2) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 26.11.1G(4)]
4.8.34 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
26.11.1G(5)]
Link between SYSC 4 Annex 1G and this section
4.8.35 G [deleted]
4.9 Handover procedures and material
Application
4.9.1 R (1) [deleted] [Editor’s note: The text of this provision has been moved
to SYSC 25.9.1R]
(2) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 25.9.2R]

FCA 2018/XX
4.9.2 R [deleted]
4.9.3 R [deleted]
Rules about handover material
4.9.4 R [deleted] [Editor’s note: The text of this provision has been moved to SYSC
25.9.4R]
4.9.5 R [deleted] [Editor’s note: The text of this provision has been moved to SYSC
25.9.5R]
4.9.6 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
25.9.6G]
4.9.7 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
25.9.7G]
Handover arrangements and certificates
4.9.8 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
25.9.8G]
Application of this section to other parts of a firm’s management
4.9.9 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
25.9.9G]
…
4 Annex
1G
The main business activities and functions of a relevant authorised person [Editor’s note: The text of this annex has been moved to SYSC 25 Annex 1G] …
5.2 Certification regime
Application
5.2.1 R [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.1.1R]
5.2.2 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.1.2G]
Purpose
5.2.3 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.1.4G]

FCA 2018/XX
General requirements
5.2.4 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.2.3G]
5.2.5 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.2.2G]
Fitness to act
5.2.6 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.2.4G]
5.2.7 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.2.5G]
5.2.8 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.2.6G]
5.2.9 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.2.7G]
5.2.10 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.2.8G]
Issuing and renewing certificates
5.2.11 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.2.9G]
5.2.12 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.2.10G]
5.2.13 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.2.11G]
5.2.14 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.2.12G]
5.2.15 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.2.13G]
5.2.16 G (1) [deleted] [Editor’s note: The text of this provision has been moved
to SYSC 27.2.14G(1)]
(2) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 27.2.14G(4)] (3) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 27.2.14G(5)]
5.2.17 G (1) [deleted] [Editor’s note: The text of this provision has been moved

FCA 2018/XX to SYSC 27.2.15G(1)]
(2) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 27.2.15G(3)] (3) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 27.2.15G(4)] 5.2.17A G [deleted] [Editor’s note: The text of this provision has been moved to SYSC 27.2.16G] Scope: general requirements
5.2.18 R [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.6.1R]
Scope: territorial scope
5.2.19 R [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.3.1R]
5.2.20 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.3.2G]
5.2.20A G [deleted] [Editor’s note: The text of this provision has been moved to SYSC 27.3.3G] Scope: employees
5.2.21 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.4.1G]
5.2.22 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.4.2G]
Scope: effect of PRA requirements
5.2.23 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.4.3G]
Scope: exclusions
5.2.24 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.4.4G]
5.2.25 R [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.4.5R]
5.2.26 R [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.4.6R]
Scope: emergency appointments

FCA 2018/XX
5.2.27 R [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.5.1R]
5.2.28 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.5.2G]
Scope: temporary UK role (the 30-day rule) 5.2.28A R [deleted] [Editor’s note: The text of this provision has been moved to SYSC 27.5.3R] 5.2.28B G [deleted] [Editor’s note: The text of this provision has been moved to SYSC 27.5.4G] 5.2.28C G (1) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 27.5.5G] (2) [deleted] [Editor’s note: The text of this provision has been moved to SYSC 27.5.6G] Scope: FCA-specified significant-harm functions
5.2.29 R [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.6.2R]
5.2.30 R [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.6.3R]
5.2.31 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.6.4G]
CASS oversight function
5.2.32 R [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.7.1R]
5.2.32A G [deleted] [Editor’s note: The text of this provision has been moved to SYSC 27.7.2G] Benchmark submission and administration function
5.2.33 R [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.7.3R]
Proprietary trader function
5.2.34 R [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.7.4R]
Significant management function
5.2.35 R [deleted] [Editor’s note: The text of this provision has been moved to SYSC

FCA 2018/XX
27.7.5R]
5.2.36 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.7.6G]
5.2.37 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.7.9G]
5.2.38 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.7.10G]
Functions requiring qualifications
5.2.39 R [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.7.11R]
5.2.40 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.7.12G]
Managers of certification employees
5.2.41 R [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.7.13R]
Material risk takers
5.2.42 R [deleted]
5.2.43 G [deleted]
Client-dealing function
5.2.44 R [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.7.18R]
5.2.45 R [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.7.19R]
5.2.46 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.7.20G]
5.2.47 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.7.21G]
5.2.48 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.7.22G]
Algorithmic trading function
5.2.49 R [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.7.23R]

FCA 2018/XX
5.2.50 R [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.7.24R]
5.2.51 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.7.25G]
5.2.52 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.7.26G]
5.2.53 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.7.27G]
5.2.54 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.7.28G]
5.2.55 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.7.29G]
5.2.56 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.7.30G]
5.2.57 G [deleted] [Editor’s note: The text of this provision has been moved to SYSC
27.7.31G]
5 Annex
1G
Examples of how the temporary UK role rule in SYSC 5.2.28A (the 30-day rule) works [Editor’s note: The text of this annex has been moved to SYSC 27 Annex 1G] … 22 Regulatory references
22.1 Application
General application
22.1.1 R This chapter applies to all firms (subject to SYSC 22.1.5R).
Activities covered
22.1.2 G This chapter is not limited to regulated activities or other specific types of
activities.
Territorial scope and overseas firms
22.1.3 R There is no territorial limitation on the application of this chapter, subject to
SYSC 22.1.5R and SYSC 22.1.6R.

FCA 2018/XX
22.1.4 G One effect of SYSC 22.1.3R is that the obligation to provide a reference can
apply even if the employee worked in an overseas office of the employer.
22.1.5 R This chapter does not apply to:
(1) an overseas firm that does not have an establishment in the United Kingdom; or (2) a UCITS qualifier (see section 266 of the Act (Disapplication of rules)).
22.1.6 R For an incoming firm or any other overseas firm, SYSC 22.2.2R (Obligation
to give references) only applies if the current or former employee in question (defined as “P” in SYSC 22.2.2R) is or was an employee of its branch in the United Kingdom and only relates to their activities as such.
22.1.7 R (1) In order to decide whether someone is an employee of a branch, the
Glossary definition of employee is applied to the branch as if the branch and the firm of which it forms part were separate firms. (2) For the purpose of (1), paragraph (4A)(c) of the definition of employee (someone employed elsewhere in the group) does not apply.
22.2 Getting, giving and updating references: the main rules
Obligation to obtain references (full scope regulatory reference firms only applicable to SMCR firms)
22.2.1 R (1) If a full scope regulatory reference firm an SMCR firm (A) is
considering:
(a) permitting or appointing someone (P) to perform a controlled function; or (b) issuing a certificate under the certification regime for P; or (ba) appointing a board director; (as explained in more detail in rows (A) and (B) of the table in SYSC 22.2.3R), A must take reasonable steps to obtain appropriate references from:
(c) P’s current employer; and
(d) anyone who has been P’s employer in the past six years.
(2) A must take reasonable steps to obtain the reference before the time in column two of the applicable row in the table in SYSC 22.2.3R.

FCA 2018/XX
(3) A must in particular request:
(a) the information in SYSC 22.2.2R(1) to (3); and (b) (if P’s current or previous employer is also a full scope regulatory reference firm an SMCR firm) the information in SYSC 22.2.2R(4) (questions (A) to (F) of Part One of SYSC 22
Annex 1R).
(4) When deciding what information to request under (1), A must have regard to the factors in SYSC 22.2.2R(5) (Factors set out in SYSC 22
Annex 2R).
Obligation to give references
22.2.2 R (1) A firm (B) must provide a reference to another firm (A) as soon as
reasonably practicable if:
(a) A is considering:
(i) permitting or appointing someone (P) to perform a controlled function; or (ii) issuing a certificate under the certification regime for P; or (iii) appointing P to another position in the table in SYSC 22.2.3R; (as explained in more detail in the table in SYSC 22.2.3R); (b) A makes a request, for a reference or other information in respect of P from B, in B’s capacity as P’s current or former employer; (c) B:
(i) is P’s current employer; or
(ii) has been P’s employer at any time in the six year period preceding the request in (1)(b); and (d) A indicates to B the purpose of the request. (2) B must disclose to A in the reference all information of which B is aware that B reasonably considers to be relevant to A’s assessment of whether P is fit and proper. (3) B is only required to disclose under (1) and (2) something that occurred or existed:
(a) in the six years before the request for a reference; or

FCA 2018/XX
(b) between the date of the request for the reference and the date B gives the reference; or (c) (in the case of serious misconduct) at any time. [Note: See SYSC 22.5.10G and SYSC 22.5.11G for guidance on the meaning of serious misconduct] (4) If B is a full scope regulatory reference firm Where B is an SMCR firm:
(a) B must in addition disclose the information in questions (A) to (F) of Part One of SYSC 22 Annex 1R (Template for regulatory references given by relevant authorised persons SMCR firms and disclosure requirements); and (b) B must disclose the information in (a) whether or not A is a full scope regulatory reference firm an SMCR firm. (5) When deciding what information to give to A under (1) to (3), B must have regard to the factors in SYSC 22 Annex 2R (Factors to take into account when asking for and giving regulatory references).
22.2.3 R Table: What positions need a reference
Position When to obtain reference Comments (A) Permitting or appointing someone to perform an FCA controlled function or a PRA controlled function. One month before the end of the application period Where a request for a reference would require:
(a) the firm requesting the reference;
(b) the employer giving the reference; or (c) any other person; to make a mandatory disclosure prior to P disclosing to its current employer that such application has been made, the date is the end of the application period.

FCA 2018/XX
Obligation to revise references: The main rule (full scope regulatory reference firms only applicable to SMCR firms)
22.2.4 R If at any time:
(1) a full scope regulatory reference firm an SMCR firm (B) has given a reference under SYSC 22.2.2R to another firm (A) about an employee (B) Issuing a certificate under
section 63F of the
Act (Certification of employees by relevant authorised persons). Before the certificate is issued This includes renewing an existing certificate. (C) Appointing someone to any of the following positions (as defined in the PRA Rulebook):
Not applicable SYSC 22.2.1R (obligation to obtain a reference) does not apply to a firm appointing someone to the position in column (1). However SYSC 22.2.2R does apply to a firm asked to give a reference to a firm appointing someone to the position in column (1). (a) a notified nonexecutive director; (b) a credit union non-executive director; or (c) a key function holder. (D) Appointing someone to be a non-SMF board director subject to competence requirements . Before appointment Only applies to a UK SMCR firm that:
(a) is an FCA-authorised person; and
(b) is not a limited scope core SMCR firm.
Note 1: Mandatory disclosure means an obligation in any applicable laws, regulations or rules to declare or disclose information to the public. Note 2: P refers to the employee or ex-employee about whom the reference is given as defined in more detail in SYSC 22.2.1R and SYSC 22.2.2R. Note 3: The application period means the period for consideration referred to in section 61 of the Act (Determination of application).

FCA 2018/XX or ex-employee of B (P);
(2) B was also a full scope regulatory reference firm an SMCR firm when it gave the reference in (1); (3) either of the following applies:
(a) B is aware of matters or circumstances that mean that if B had been aware of them when giving that reference, this
chapter would have required B to draft the reference
differently; or
(b) the following applies:
(i) B has since giving the reference reached conclusions of the type described in question (E) of Part One of SYSC 22 Annex 1R or taken disciplinary action of the type described in question (F) of Part One of SYSC 22
Annex 1R; and
(ii) if B had taken or reached those conclusions or actions within the six year period referred to in Part One of SYSC 22 Annex 1R, this chapter would have required B to draft the reference differently; and (4) it would be reasonable to consider the differences in (3) to be significant for an assessment by A of the fitness and propriety of P for the role at A for which the reference was given; B must:
(5) make reasonable inquiries as to the identity of P’s current employer; and (6) give A details of those differences in writing as soon as reasonably practicable, unless SYSC 22.2.5R says that B does not have to do so.
22.2.5 R B does not need to update A if:
(1) A is no longer a firm;
(2) P has not yet been employed by A (because, for example, P is still working their notice period with B) and it is no longer intended for A to employ P; (3) A is no longer P’s employer; or (4) despite making reasonable enquiries under SYSC 22.2.4R, B does not know whether P is still employed by A.
22.2.6 R This rule sets out time limits about the obligation to update a reference in
SYSC 22.2.4R.

FCA 2018/XX
(1) If B still employs P, SYSC 22.2.4R applies throughout the period B remains employed. (2) If B no longer employs P, the obligation to update ends six years after P ceased to be employed by B. (3) If B no longer employs P and the matters or circumstances are not serious misconduct by P, B does not have to disclose something if it did not occur or exist in the six year period ending on the date B gave the original reference. This limitation applies in addition to the one in (2). [Note: See SYSC 22.5.10G and SYSC 22.5.11G for guidance on the meaning of serious misconduct] Obligation to revise references: Finding out who the current employer is (all firms)
22.2.7 R If at any time:
(1) a full scope regulatory reference firm an SMCR firm (B) has given a reference under SYSC 22.2.2R to another firm (A) about an employee or ex-employee of B (P); (2) B asks A whether P is still an employee of A; and (3) B gave A the reference no more than six years ago; A must answer that question as soon as reasonably practicable, even if B does not tell A why it wants to know that information.
22.3 Drafting the reference and the request for a reference
How to draft the reference
22.3.1 G There are no requirements about the form in which a firm that is not a full
scope regulatory reference firm an SMCR firm should give a reference.
22.3.2 G SYSC 22.4 has requirements about the form in which a full scope regulatory
reference firm an SMCR firm should give a reference.
How to draft the request for a reference
22.3.3 G (1) A firm (A) asking another firm (B) for a reference should give B
sufficient information to let B know that the requirements in this
chapter apply to the reference it is being asked to give and which
requirements apply.
(2) As long as it complies with (1), A does not have to set out specifically the information this chapter requires it to obtain. This is because B should include that information even though B is not

FCA 2018/XX specifically asked to include it.
22.3.4 G A firm asking for a reference under this chapter from a current or former
employer that is not a firm will normally need to specify what information it would like. Inclusion of additional material
22.3.5 G (1) This chapter sets out minimum requirements for a reference. It does
not prevent a firm from including more than is required by this
chapter.
(2) If a firm does disclose more than is required by this chapter the reference should still meet its duties under general law to its former employee and the recipient (see SYSC 22.5.3G to SYSC 22.5.5G).
22.3.6 G Nothing in this chapter prevents a firm from disclosing material outside the
time limits under this chapter.
22.4 Drafting the reference: detailed requirements for full scope regulatory
reference firms SMCR firms
Purpose of SYSC 22 Annex 1R
22.4.1 G SYSC 22 Annex 1R (Template for regulatory references given by relevant
authorised persons SMCR firms and disclosure requirements) has two purposes:
(1) to set out what information a full scope regulatory reference firm an SMCR firm should disclose under SYSC 22.2.2R(4); and (2) to provide a template that a full scope regulatory reference firm an SMCR firm should use when giving a reference under this chapter. How to draft the reference
22.4.2 R (1) A full scope regulatory reference firm An SMCR firm must use the
template in Part One of SYSC 22 Annex 1R (Template for regulatory references given by relevant authorised persons SMCR firms and disclosure requirements) when giving a reference under this chapter to another firm (A). (2) A firm may make minor changes to the format of the template in Part One of SYSC 22 Annex 1R when giving a reference under this
chapter, provided that the reference includes all the information
required by SYSC 22 Annex 1R.
(3) This rule applies even if A is not a full scope regulatory reference firm an SMCR firm.

FCA 2018/XX
22.4.3 G (1) SYSC 22.4.2R does not stop a full scope regulatory reference firm an
SMCR firm including matters in the reference not required by the template in SYSC 22 Annex 1R. (2) A full scope regulatory reference firm An SMCR firm may include the material required by the template and additional material in the same document. (3) Any additional material should not alter the scope of any of the questions in the templates.
22.4.4 G A full scope regulatory reference firm An SMCR firm should use the
template in SYSC 22 Annex 1R (Template for regulatory references given by relevant authorised persons SMCR firms and disclosure requirements) even if the firm asking for the reference does not specifically ask it to. PRA requirements
22.4.5 R B may combine in a single reference what the PRA’s rules require and what
this chapter requires.
22.5 Giving references: additional rules and guidance for all firms
Verification
22.5.1 R This chapter does not require a firm to disclose information that has not been
properly verified.
22.5.2 G (1) For example, this chapter does not necessarily require a firm to
include in a reference the fact that an ex-employee left while disciplinary proceedings were pending or had started. Including such information is likely to imply that there is cause for concern about the ex-employee but the firm may not have established that the exemployee was actually responsible for misconduct. (2) However, a firm may include such information in a reference if it wishes to (see SYSC 22.3.5G). Accuracy
22.5.3 G A firm should, when giving a reference under this chapter, provide as
complete a picture of an employee’s conduct record as possible to new employers. Fairness
22.5.4 G (1) A firm supplying a reference in accordance with this chapter owes a
duty under the general law to its former employee and the recipient firm to exercise due skill and care in the preparation of the reference.

FCA 2018/XX
(2) The firm may give frank and honest views, but only after taking reasonable care both as to factual content, and as to the opinions expressed. (3) References should be true, accurate, fair and based on documented fact.
22.5.5 G (1) An example of the general duty described in SYSC 22.5.4G is that
fairness will normally require a firm to have given an employee an opportunity to comment on information in a reference. The firm might do this through, for example, disciplinary proceedings. (2) Paragraph (1) does not mean that the firm should provide an opportunity to comment on the reference itself, as opposed to the allegations on which it is based. (3) A firm may have given the employee an opportunity to comment on allegations that are later included in a reference even though, at the time that the firm is giving that opportunity, no reference is being contemplated. That may mean that the firm gives the employee their opportunity to comment on the allegations some time before the reference is prepared. (4) Paragraph (1) does not mean that a firm will be unable to include an allegation in a reference if it has offered the employee an opportunity to comment on the allegation but the employee has unreasonably refused to do so. (5) Where a firm should have given an employee an opportunity to comment on an allegation if the allegation is to be included in a reference, this chapter requires the firm to give the employee that opportunity rather than merely to leave the allegation out of the reference. (6) Paragraph (5) may mean that where the firm has not given its employee an opportunity to comment on a matter at the time it first arose, it will have to give the employee the opportunity around the time that the firm is preparing the reference. (7) The obligation to give an employee an opportunity to comment does not mean that there is a wider duty to investigate whether there are facts that show that there has been a conduct breach (see SYSC 22.5.18G). (8) This chapter does not require the employee’s views to be included in the reference. Instead the firm should take those views into account so far as appropriate when deciding whether something should be disclosed and how the disclosure is drafted. Outsourcing

FCA 2018/XX
22.5.6 G The requirements in this chapter for a firm (B) to give a firm (A) a reference
also apply where A has outsourced the collection of that information to another (unregulated) third party, where B has been made aware that the unregulated third party is acting on behalf of A. Circumstances in which the ex-employee left
22.5.7 G The obligation to give a reference for an employee or ex-employee applies
however the employment ended or is going to end. For example, it applies whether it ended through resignation, redundancy, dismissal or fixed term work, a secondment or temporary work coming to an end. Missing or incomplete information
22.5.8 G (1) If a firm’s records do not cover the maximum periods contemplated
by SYSC 22.2.2R or SYSC 22 Annex 1R (Template for regulatory references given by relevant authorised persons SMCR firms and disclosure requirements), the firm should note that in the reference. (2) A firm should not include a warning of the type described in (1) as a matter of routine. It should only be included if there is a genuine need to include it. All relevant information: Calculation of six year period for disclosure
22.5.9 G (1) In general there is a six year limit on what should be disclosed under
SYSC 22.2.2R(1) to (3).
(2) Where the matter to be disclosed consists of a single course of conduct (such as market manipulation) the six year period does not begin until that course of conduct has come to an end. This means that individual events that occurred more than six years ago may still be within the six year limit. (3) This guidance is also relevant to the six year time limits for updating references in SYSC 22.2.6R. All relevant information: Removal of six year period
22.5.10 G (1) SYSC 22.2.2R(1) to (3) normally has a six year time limit. SYSC
22.2.2R(3)(c) removes that time limit for serious matters. This paragraph (SYSC 22.5.10G) and SYSC 22.5.11G have guidance about this. This guidance is also relevant to the time limits for updating references in SYSC 22.2.6R. (2) The removal of the time limit does not mean that the time that has elapsed since the matter occurred is irrelevant. The length of time that has elapsed is relevant to deciding whether the matter is serious. In general, the longer ago the matter occurred, the less likely it is still to be serious for these purposes.

FCA 2018/XX
(3) In determining whether something is serious for these purposes, the key question is how important the information still is for the requesting firm’s assessment of the employee’s fitness for the function that they are going to perform. (4) In considering what is relevant, a firm should, in particular, have regard to SYSC 22.5.4G (Fairness). (5) The table in SYSC 22.5.11G provides guidance on some of the factors which a firm should take into account when determining whether a matter is serious. (6) The guidance in this paragraph and in the table in SYSC 22.5.11G is only designed for the purposes of this chapter. It does not, for example, apply for the purposes of SUP 15 (Notifications to the FCA), DEPP or EG.
22.5.11 G Table: Examples of factors to take into account when deciding whether old
misconduct is sufficiently serious to disclose Factors to take into account Comments (A) Whether P has committed a serious breach of individual conduct requirements. Individual conduct requirements has the same meaning as in Part Two of SYSC 22
Annex 1R (Template for regulatory
references given by relevant authorised persons SMCR firms and disclosure requirements). Factors to take into account in deciding whether the breach is serious include the following. (1) The extent to which the conduct was deliberate or reckless. (2) The extent to which the conduct was dishonest. (3) Whether the breaches are frequent or whether they have continued over a long period of time. The fact that breaches were frequent or repeated may increase the likelihood that they should be disclosed since the breaches may show a pattern of noncompliance. (4) The extent of loss, or risk of loss, caused to existing, past or potential investors, depositors, policyholders

FCA 2018/XX or other counterparties or customers.
(5) The reasons for the breach. For example, where the breach was caused by lack of experience which has been remedied by training or further experience, it is less likely that the breach will still be relevant. (B) Whether the conduct caused B to breach requirements of the regulatory system or P was concerned in a contravention of such a requirement by B and, in each case, whether P’s conduct was itself serious. (1) The factors in (A) are relevant to whether P’s conduct was serious. (2) The seriousness of the breach by B is relevant. The factors in (A) are also relevant to this. (3) A breach by B of certain requirements is always likely to be serious under (2). Breach of the threshold conditions is an example. However that does not mean that P’s involvement will automatically be serious. (C) Whether P’s conduct involved dishonesty (whether or not also involving a criminal act). Dishonesty is an important factor but it is not automatically decisive in every case. For instance, a small one-off case of dishonesty many years ago may not be sufficiently serious to require disclosure. (D) Whether the conduct would have resulted in B’s dismissing P, had P still been working for B, based on B’s disciplinary policies and the requirements of the law about unfair dismissal. (E) Whether the conduct was such that, if B was considering P for a role today and became aware of the historical conduct, B would not employ P today notwithstanding the time that

FCA 2018/XX has passed.
Note 1: P refers to the employee about whom the reference is being written. Note 2: B refers to the firm giving the reference. Breach of APER
22.5.12 G (1) An example of information that may be relevant under SYSC
22.2.2R(1) to (3) is the fact that the employee has breached a requirement in APER. (2) This means that any firm (not just one that is a full scope regulatory reference firm an SMCR firm) should consider whether it needs to disclose a breach of APER when giving a reference under this
chapter.
[Editor’s note: This provision will be dealt with in a second Consultation Paper] Agreements not to disclose information
22.5.13 R A firm must not enter into any arrangements or agreements with any person
that limit its ability to disclose information under this chapter.
22.5.14 G SYSC 22.5.13R covers all types of agreements and arrangements. For
example:
(1) it is not limited to an agreement or arrangement entered into when the employee leaves; (2) it applies however the employment ends (see SYSC 22.5.7G); and (3) it covers a “COT 3” Agreement settled by the Advisory, Conciliation and Arbitration Service (ACAS).
22.5.15 G A firm should not give any undertakings to supress or omit relevant
information in order to secure a negotiated release.
22.5.16 G The obligation to supply information to another firm under this chapter will
apply notwithstanding any agreement prohibited by SYSC 22.5.13R. Time in which to respond to reference requests
22.5.17 G The FCA expects that normally a firm should issue a reference under this
chapter within six weeks of being asked to.
Duty to investigate allegations
22.5.18 G (1) A firm should, wherever feasible, conclude investigative procedures
before the employee departs.

FCA 2018/XX
(2) However, this chapter does not create a duty to investigate alleged misconduct by an employee or former employee. (3) There are several reasons why a firm may find it appropriate to investigate potential misconduct by an employee or former employee, including:
(a) assessing the actual and potential damage resulting from misconduct; (b) identifying other individuals potentially culpable or accountable for the breach; (c) satisfying itself that the SMF manager responsible for the areas where the misconduct occurred took reasonable steps to prevent or stop it; and (d) (where the employee has remuneration susceptible to malus or clawback) enabling it to consider whether any adjustments are justified. Criminal record checks
22.5.19 G A firm giving a reference need not include information from a criminal
records check it has carried out under Part V of the Police Act 1997 (Certificates of Criminal records, etc). The recruiting firm should carry out a criminal records check itself if necessary. SUP 10C.10.16R requires a relevant authorised person an SMCR firm to carry out such a check when appointing an SMF manager or a board director who is not an approved person.
22.6 Giving and updating references: additional rules and guidance for full scope
regulatory reference firms SMCR firms
Omitting or supplementing mandatory disclosures
22.6.1 G (1) A firm may have concluded that an employee is unfit or has breached
COCON or APER (as described in questions (E) to (F) of Part One of SYSC 22 Annex 1R (Template for regulatory references given by relevant authorised persons SMCR firms and disclosure requirements)). The firm may later become aware of facts or matters causing it to revise its original conclusions. (2) If so, the firm may decide not to disclose in a reference its conclusion or may qualify its conclusion with supplementary information.
22.6.2 G (1) A firm may have concluded that an employee is unfit or has breached
COCON or APER (as described in questions (E) to (F) of Part One of

FCA 2018/XX
SYSC 22 Annex 1R (Template for regulatory references given by relevant authorised persons SMCR firms and disclosure requirements)). However the firm may consider that the disclosure is incomplete without including mitigating circumstances. (2) For example, if the firm is reporting a breach of COCON it may consider that the breach is very uncharacteristic of the employee and that they have had an exemplary record since then. In that case, the firm should include those views. Requirement to consider whether there has been a conduct breach
22.6.3 G (1) If a firm has taken disciplinary action of the type referred to in
question (F) in Part One of SYSC 22 Annex 1R (Template for regulatory references given by relevant authorised persons SMCR firms and disclosure requirements) against an employee and is asked to give a reference about that employee, the firm should (if it has not already done so) consider whether the basis on which it took that action amounts to a breach of any individual conduct requirements covered by question (F). (2) If the firm decides that the basis on which it took that action does amount to a breach of those requirements, it should include that disciplinary action in the reference under question (F). (3) Paragraph (2) applies even if the grounds of the disciplinary action did not include such a breach of individual conduct requirements. [(4) SYSC TP 5.4.5R disapplies the requirement in (1) for disciplinary action taken before 7 March 2017 or, in the case of relevant authorised persons SMCR dual regulated banking sector firms, 7 March 2016, where a full scope regulatory reference firm’s an SMCR dual regulated banking sector firm’s records do not record whether previous conduct subject to disciplinary action amounted to a breach. [Editor’s note: This provision will be dealt with in a second Consultation Paper] (5) The obligation to consider whether there was a conduct breach does not mean that there is a wider duty to investigate whether there are facts that show that there has been a conduct breach (see SYSC 22.5.18G). All relevant information: Interaction with mandatory disclosures
22.6.4 G (1) SYSC 22.2.2R(1) to (3) may require a full scope regulatory reference
firm an SMCR firm to disclose information that goes beyond the mandatory minimum information in Part One of SYSC 22 Annex 1R (Template for regulatory references given by relevant authorised persons SMCR firms and disclosure requirements).

FCA 2018/XX
(2) This may mean, for instance, that a firm should in some cases disclose a conclusion that an employee or former employee has breached COCON or APER where that conclusion was reached outside the time limits in Part One of SYSC 22 Annex 1R. Updating references fairly
22.6.5 G (1) SYSC 22.5.1R to SYSC 22.5.5G (Verification, accuracy and fairness)
also apply to updating a reference under SYSC 22.2.4R.
(2) Therefore fairness may require a firm to have given an employee an opportunity to comment on an allegation if it is included in an update to a reference.
22.7 Getting references: additional rules and guidance for full scope regulatory
reference firms SMCR firms
Intra-group transfers
22.7.1 R (1) This rule applies when:
(a) a full scope regulatory reference firm an SMCR firm (A) would otherwise have to ask another person (B) for a reference under SYSC 22.2.1R; and (b) A and B are in the same group. (2) A need not ask for a reference from B if there are adequate arrangements in place under which A has access to the same information sources as B to the extent that they are relevant to things A has to ask B under SYSC 22.2.1R (Obligation to obtain references). (3) If A only has access to some of the information sources in (2), A may ask for a reference that only covers the sources to which A does not have such access. (4) If A, in accordance with this rule, does not ask for a reference or a full reference it must access the information resources referred to in this rule and get the relevant information within the time specified by SYSC 22.2.3R.
22.7.2 G (1) SYSC 22.7.1R means that a firm recruiting someone from another
member of its group is not required to request a reference from the other where the group has centralised records or alternative measures in place to ensure sharing of relevant information between its members. (2) The recruiting firm should be satisfied that the centralised or

FCA 2018/XX alternative measures ensure relevant information is made available as
part of the fit and proper assessment of the recruit.
Who should be asked to give a reference
22.7.3 G The Glossary definition of employer covers more than just a conventional
employer and so it may not always be obvious who a person’s employer is. Therefore a full scope regulatory reference firm an SMCR firm appointing someone to a position that requires a reference may have to get the employee’s help in identifying their previous employers.
22.7.4 G (1) SYSC 22.2.1R (Obligation of a full scope regulatory reference firm
an SMCR firm to try to obtain a reference) applies even if the exemployer is not a firm. (2) A full scope regulatory reference firm An SMCR firm should take all reasonable steps to try to obtain the reference in these circumstances. However, the FCA accepts that the previous employer may not be willing to give sufficient information. Asking for a reference to be updated
22.7.5 G (1) SYSC 22.2.1R (Obligation of a full scope regulatory reference firm
an SMCR firm to try to obtain a reference) applies even if the employer has already got a reference for the employee. For example:
(a) a relevant authorised person an SMCR firm should have a reference whenever it renews the certificate of a certification employee; and (b) changing jobs within the same full scope regulatory reference firm SMCR firm may require a reference. (2) However, the full scope regulatory reference firm SMCR firm does not necessarily need to obtain a new reference each time (a) or (b) above occurs. That is because an existing reference will very often still be appropriate for the purpose (see SYSC 22.7.6G to SYSC 22.7.8G).
22.7.6 G If a relevant authorised person an SMCR firm (A):
(1) appoints someone (P) to a specified significant-harm function position; (2) obtains a reference from an ex-employer; and (3) later wishes to renew P’s certificate under the certification regime; it is unlikely that A will need to ask for another reference from that exemployer or ask for it to be reissued unless there is a change in P’s role of the type described in SYSC 27.2.15G (major changes in role).

FCA 2018/XX
22.7.7 G (1) If a full scope regulatory reference firm an SMCR firm (A):
(a) appoints someone (P) to a specified significant-harm function or an approved person position; (b) obtains a reference from an ex-employer (B); and (c) later wishes to:
(i) appoint P to another specified significant-harm function or approved person position; or (ii) keep P in the same specified significant-harm function but make a change in P’s role of the type described in SYSC 27.2.15G (major changes in role), whether that change is made at a time when the certificate has not yet come up for renewal or at the time it is being reissued; or (iii) move P from a specified significant-harm function to an approved person position or vice versa; A should consider whether to ask B to reissue or amend its reference. (2) A may decide that it is not necessary to ask B to reissue or amend its reference. For example, A may decide that:
(a) the existing reference already covers everything necessary; or (b) (where B is not a firm) B will not give any further information.
22.7.8 G If:
(1) a firm (A) appoints someone (P) to a specified significant-harm function or approved person position; (2) A obtains a reference from an ex-employer (B); (3) later P transfers to a specified significant-harm function or an approved person position with a full scope regulatory reference SMCR firm in A’s group (C); (4) B’s reference is:
(a) addressed to all firms in A’s group; or (b) otherwise drafted so that it is clear that C may rely on it; and (5) C does not need to ask for the reference to be reissued or amended, taking account of SYSC 22.7.6G and SYSC 22.7.7G;

FCA 2018/XX
C may be able to rely on that reference without asking B to give another one. When references are to be obtained
22.7.9 G If a full scope regulatory reference firm an SMCR firm is unable to obtain a
reference by the time in column two of the table in SYSC 22.2.3R, it should still try to obtain the reference as soon as possible afterwards.
22.7.10 G (1) Where a relevant authorised person an SMCR firm needs to fill a
vacancy for a specified significant-harm function which could not have reasonably been foreseen, the FCA recognises that it may not be reasonable to expect the relevant authorised person SMCR firm to obtain references prior to issuing a certificate. (2) In such cases, the relevant authorised person SMCR firm should take up the reference as soon as reasonably possible. (3) If a reference obtained later raises concerns about the person’s fitness and propriety, the relevant authorised person SMCR firm should revisit its decision to issue the person with a certificate.
22.7.11 G (1) Although this chapter (see SYSC 22.2.3R) only requires a full scope
regulatory reference firm an SMCR firm to try to get a reference for a person it is recruiting to perform an FCA controlled function or a PRA controlled function towards the end of the application process, the FCA would normally expect a firm to have obtained the reference before the application for approval is made. (2) The main examples of circumstances in which it would be reasonable for a firm to delay getting a reference are where asking for a reference earlier will create a serious risk of:
(a) breaching the confidentiality of a wider commercial or corporate transaction; (b) prematurely triggering the need for a public announcement; or (c) the candidate not applying for the position in the first place because it would reveal to the candidate’s current employer the proposed move too soon. (3) The FCA may consider that it needs to see the information in a reference before it reaches a decision. If so, it may formally ask for that information and extend the time period in which it has to make its decision until it gets the reference. SUP 10C.10.28G gives additional details about requests for further information and the effect they have on the period of time the FCA has to make a decision about an application.

FCA 2018/XX
(4) Full scope regulatory reference firms SMCR firms are reminded that the Act itself requires a firm to be satisfied that a candidate is fit and proper before it makes an application for approval (see SUP 10C.10.14G for more detail). SYSC 22.7.11G(2) does not affect that obligation.
22.8 Additional rules and guidance for all firms
Policies and procedures
22.8.1 R A firm must establish, implement and maintain policies and procedures that
are adequate for the purpose of complying with the obligations in this
chapter.
22.8.2 G SYSC 22.8.1R does not require a firm to create or keep records that are not
required under SYSC 22.9.1R (General record keeping rules) or another rule. Appointed representatives
22.8.3 R This chapter applies to a firm’s appointed representatives as well as to the
firm.
22.8.4 R When a relevant authorised person an SMCR firm is permitting or
appointing someone to perform a controlled function whose approval is given under SUP 10A.1.15R or SUP 10A.1.16R (appointed representatives of relevant authorised persons SMCR firms), the requirements of this chapter for firms that are not full scope regulatory reference firms SMCR firms apply in place of the requirements that only apply to full scope regulatory reference firms SMCR firms.
22.8.5 G A firm should ensure its appointed representative complies with the
requirements of this chapter when the appointed representative appoints an approved person under SUP 10A.1.15R to SUP 10A.1.16BR (appointed representatives). [Editor’s note: This provision will be dealt with in the second Consultation Paper]
22.8.6 G (1) A firm should ensure that its appointed representative gives a
reference when another firm (or its appointed representative) asks that appointed representative to give a reference in accordance with this chapter. (2) A firm is not responsible for its appointed representative’s giving references if another principal has accepted responsibility for this. [Editor’s note: This provision will be dealt with in the second Consultation Paper] Getting and giving a reference where the employee has worked in a group or on

FCA 2018/XX secondment
22.8.7 G If:
(1) a firm (A) is thinking of employing someone (P); (2) P is employed by a group services company (D) that is not a firm; (3) P (in their capacity as an employee of D) performs a function or service for a firm (B) in the same group as D such that P is also an employee of B; and (4) A intends to appoint (P) to a position that entitles A to obtain a reference from B; then:
(5) (if A is a full scope regulatory reference firm an SMCR firm) A should ask both B and D for a reference; (6) B is obliged to give the reference if A asks it to (whether or not A is a full scope regulatory reference firm an SMCR firm); (7) B should ask D to provide it with the information needed to provide a reference in accordance with this chapter; (8) D may give a reference but (as it is not a firm) it is not obliged to; and (9) D and B may give a single joint reference.
22.8.8 G SYSC 22.8.7G also applies where:
(1) D is not in the same group but has seconded P to B; and (2) P (in their capacity as an employee of D) performed any function or services for B such that P was also an employee of B.
22.8.9 G If:
(1) a firm (A) is thinking of appointing someone (P) to a position that entitles A to obtain a reference from another firm (B); and (2) P was an employee of other members of B’s group as well as of B; then:
(3) (if A is a full scope regulatory reference firm an SMCR firm) A should ask all the group members that employed P for a reference; (4) B should give a reference if A asks it to (whether or not A is a full scope regulatory reference firm an SMCR firm);

FCA 2018/XX
(5) P’s employers in that group (including any that are not firms) may give a single joint reference; and (6) if the reference is being provided on a consolidated group basis, it should be clear what information is relevant to which employer within the group.
22.9 Records
General record keeping rules (full scope regulatory reference firms only applicable to SMCR firms)
22.9.1 R (1) A full scope regulatory reference firm An SMCR firm must arrange
for orderly records to be created and kept that are sufficient to enable it to comply with the requirements of this chapter. (2) This rule only applies to records in relation to the following questions in Part One of SYSC 22 Annex 1R (Template for regulatory references given by relevant authorised persons SMCR firms and disclosure requirements):
(a) question (E) (fit and proper); and
(b) question (F) (disciplinary action).
Time limit for records to be kept (full scope regulatory reference firms only applicable to SMCR firms)
22.9.2 G SYSC 22.9.1R does not have an express time limit for which a firm should
retain the records as its effect is that those time limits are the same as the time limits in SYSC 22 Annex 1R (Template for regulatory references given by relevant authorised persons SMCR firms and disclosure requirements). Reduction in disclosure obligations where there are limited record keeping requirements (all firms)
22.9.3 R A firm does not breach the requirements of this chapter by failing to include
information in a reference that it would otherwise have to include if:
(1) the reason for the omission is that the firm does not have the necessary records; and (2) neither SYSC 22.9.1R nor any other requirement of or under the regulatory system requires the firm to have those records.
22.9.4 G If a firm is asked to give a reference in circumstances where the record
keeping requirements in SYSC 22.9.1R do not apply:
(1) it is still required to give the reference;

FCA 2018/XX
(2) it should give the reference based on the records it does have; and (3) it will not breach the requirements of this chapter by failing to include information in a reference if the reason for this is that it does not have the necessary records, as long as it is not required to have those records by some other requirement in the Handbook outside this chapter or some other requirement of or under the regulatory system. Effect of previous record keeping requirements (full scope regulatory reference firms only applicable to SMCR firms)
22.9.5 G (1) SYSC 22.9.1R applies to keeping records created before the date this
chapter came into force (or before this chapter first applied to the
firm in question) as well as ones created afterwards.
(2) A full scope regulatory reference firm An SMCR firm does not breach the requirements of this chapter by failing to include something in a reference or failure to have records because it destroyed the relevant records before the date this chapter came into force (or before this chapter first applied to it) in accordance with the record keeping requirements applicable to it at the time of destruction. 22 Annex 1R Template for regulatory references given by relevant authorised persons SMCR firms and disclosure requirements
Part One: Form of Template
Guide to using this template:
Each question must be answered. Where there is nothing to disclose, this should be confirmed by ticking the “No” box for the relevant question. In this template:

“we” / “our firm” refers to the firm or firms giving the reference (as set out in either 1A
or 1B below);
“individual” refers to the subject of the reference (as set out in 2 below); and
“your” refers to the firm requesting the reference (as set out in 3 below).
Information requested Response

FCA 2018/XX
1A Name, contact details and firm reference number of firm providing reference; or 1B Names, contact details and firm reference numbers (where applicable) of group firms providing a joint reference 2 Individual’s name (i.e. the subject of the reference) 3 Name, contact details and firm reference number of firm requesting the reference 4 Date of request for reference 5 Date of reference The answers to Questions A to F cover the period beginning six years before the date of your request for a reference and ending on the date of this reference. Question A Has the individual:
(1) performed a specified significant harm function for our firm; or (2) been an approved person for our firm. Answer:
Yes
No
Question B:
Has the individual performed one or more of the following roles in relation to our firm:
(1) notified non-executive director;
(2) credit union non-executive director; or

FCA 2018/XX
(3) key function holder (other than a controlled function); or (4) board director. Answer:
Yes
No
Question C:
If we have answered ‘yes’ to either Question A or B above, we set out the details of each position held below, including:
(1) what the controlled function, specified significant-harm function or key function holder role is or was; (2) (in the case of a controlled function) whether the approval is or was subject to a condition, suspension, limitation, restriction or time limit; (3) whether any potential FCA governing function is or was included in a PRA controlled function; and (4) the dates during which the individual held the position. Answer:
Question D
Has the individual performed a role for our firm other than the roles referred to in Questions A and B above:
Answer:
Yes
No
If ‘yes’, we have provided summary details of the other role(s), e.g. job title, department and business unit, below.

FCA 2018/XX
Question E
Have we concluded that the individual was not fit and proper to perform a function:
Answer:
Yes
No
If ‘yes’ and associated disciplinary action was taken as a result, please refer to Question F below. If ‘yes’, and no associated disciplinary action was taken as a result, we have set out below the facts which led to our conclusion. Question F We have taken disciplinary action against the individual that:
(1) relates to an action, failure to act, or circumstances, that amounts to a breach of any individual conduct requirements that:
(a) apply or applied to the individual; or (b) (if the individual is or was a key function holder, a notified non-executive director or a credit union non-executive director for your firm) the individual is or was required to observe under PRA rules (including if applicable, PRA rules in force before 7 March 2016); or (2) relates to the individual not being fit and proper to perform a function. Answer:
Yes
No
If ‘yes’, we have provided below a description of the breaches (including dates of when they occurred) and the basis for, and outcome of, the subsequent disciplinary action. Question G

FCA 2018/XX
Are we aware of any other information that we reasonably consider to be relevant to your assessment of whether the individual is fit and proper? This disclosure is made on the basis that we shall only disclose something that:
(1) occurred or existed:
(a) in the six years before your request for a reference; or (b) between the date of your request for the reference and the date of this reference; or (2) is serious misconduct. Answer:
Yes
No
If ‘yes’, we have provided the relevant information below.
Part Two: Definitions used in Part One
Section One of Part Two of this annex defines terms used in this annex.
Section Two of Part Two of this annex modifies the meaning of certain requirements in Part
One and has material about completing the template.
Section One: Meaning of certain terms and phrases
Defined term or phrase Meaning
B B refers to the employer or ex-employer giving the reference as defined in more detail in SYSC 22.2.1R and SYSC 22.2.2R. P P refers to the employee or ex-employee about whom the reference is given as defined in more detail in SYSC 22.2.1R and SYSC 22.2.2R. A finding or conclusion by B that P was not fit and proper to perform a function (see questions (E) to (F) of the template) This means a finding or conclusion by B in the following circumstances where:
(a) B assesses the continuing fitness and propriety of P as an approved person in

FCA 2018/XX accordance with the requirements of the regulatory system, including when carrying out this assessment under section 63(2A) of the Act (annual assessment of approved persons by a relevant authorised person an SMCR firm); or (b) B assesses the fitness and propriety of P when B is proposing to issue a certificate under section 63F of the Act (Certification of employees by relevant authorised persons SMCR firms) for P. Paragraph (b) applies whether the certificate is being issued for the first time or is being renewed. Individual conduct requirements Individual conduct requirements mean any of the following:
(a) COCON;
(b) APER;
(c) the PRA’s Individual Conduct Standards or Senior Insurance Manager Conduct Standards (in Chapter 3 of the Part of the PRA Rulebook called Solvency II Firms:
Insurance – Conduct Standards and in
Chapter 3 of the Part of the PRA Rulebook
called Non-Solvency II Firms: Large NonSolvency II Firms – Conduct Standards and in Non-Solvency II firms - Conduct Standards); (d) the PRA’s Individual Conduct Rules or Senior Manager Conduct Rule (in Chapters 2 and 3 of the Part of the PRA Rulebook called CRR Firms: Conduct Rules and in Chapters 2 and 3 of the Part of the PRA Rulebook called Non-CRR Firms: Conduct Rules); or (e) the PRA’s Conduct Standards (in Chapter 3 of the Part of the PRA’s PRA Rulebook called CRR Firms: Fitness and Propriety and
Chapter 3 of the Part of the PRA Rulebook
called Non-CRR Firms: Fitness and
Propriety).
Function (as referred to in questions (E) to (F)) A function means a function as an approved person or certification employee. Disciplinary action Disciplinary action has the same meaning as in section 64C(2) of the Act (Requirement for

FCA 2018/XX relevant authorised persons to notify regulatory of disciplinary action), which is:
(a) the issue of a formal written warning; or (b) the suspension or dismissal of P; or (c) the reduction or recovery of any of P’s remuneration. This definition applies even if B is not a relevant authorised person an SMCR firm. Notified non-executive director, credit union non-executive director and key function holder These terms have the same meaning as they do in the PRA Rulebook. Specified significant harm function, approved person, controlled function and PRA controlled function These terms have the same meaning as they do in the Glossary. Potential FCA governing function Potential FCA governing function means a function:
(a) that would have been an FCA controlled function but for:
(i) SUP 10A.11 (Minimising overlap with the PRA approved persons regime); or (ii) SUP 10C.9 (Minimising overlap with the PRA approved persons regime); (b) but instead is included in a PRA controlled function under the following parts of the PRA Rulebook:
(i) Part 2 of “Senior management functions”; (ii) Part 2 of “Insurance – Senior Insurance Management Functions”; (iii) Part 6 of “Solvency II Firms: Senior Insurance Managers Regime – Transitional Provisions”; or (iv) Part 6 of “Non-Solvency II Firms: Large Non-Solvency II Firms – Senior Insurance Managers Regime – Transitional Provisions.
Section Two: Supplementary requirements
Item of template for which supplemental requirements apply Supplemental requirements Questions (E) and (F) If:
(a) the finding or disciplinary action was

FCA 2018/XX reached or taken by another member of B’s group with the authority to do so; and (b) the finding or disciplinary action relates to conduct by P relating to the carrying on of activities (whether or not regulated activities) by B; this question applies to such finding or disciplinary action in the same way as it does to findings or disciplinary action made or taken by the firm itself. Question (F) This question is subject to SYSC TP 5.4.5R (where there is no need to disclose disciplinary action that took place before certain dates if the firm’s records do not show whether there was a breach of individual conduct requirements). The whole of Part One of this annex The template to be used by a firm in giving a reference includes everything in Part One of this annex except for the “Guide to using this template” paragraph. 22 Annex Factors to take into account when asking for and giving regulatory references Matters to take into account Comments (A) Any outstanding liabilities of that person from commission payments (B) Any relevant outstanding or upheld complaint from an eligible complainant against P (C) Section 5 of the relevant Form A in SUP 10A Annex 4 (Application to perform controlled functions under approved persons regime) or SUP 10C Annex 2 (Application to perform senior management functions) [To be reviewed in a second Consultation Paper] (D) FIT 2 (Main assessment criteria) (E) The persistency of any life policies sold This only applies if SUP 16.8.1G(1)

FCA 2018/XX by P (Persistency reports from insurers) applies to B Note: P refers to the employee or ex-employee about whom the reference is given as defined in more detail in SYSC 22.2.1R and SYSC 22.2.2R. After SYSC 22 (Regulatory references) insert a new chapter SYSC 23. The text is not underlined. 23 Senior managers and certification regime: Introduction and classification
23.1 Purpose
23.1.1 G The purpose of this chapter is to:
(1) explain what the senior managers and certification regime is and where to find the main Handbook provisions; (2) define which firms the regime applies to; (3) define the different kinds of SMCR firm; and (4) require certain firms to carry out criminal record checks before appointing certain board directors.
23.2 Definitions and types of firms
23.2.1 R SYSC 23 Annex 1R (Definition of SMCR firm and different types of SMCR
firms) defines:
(1) what an SMCR firm is; and
(2) what the different types of SMCR firm are.
23.2.2 G Broadly speaking, firms covered by the senior managers and certification
regime that are dual-regulated by the FCA and the PRA are divided into two categories:
(1) Banks and deposit-takers. They are called SMCR dual regulated banking sector firms. (2) Insurers.
23.2.3 G Broadly speaking, firms covered by the senior managers and certification
regime that are regulated by the FCA are divided into three categories:
(1) Firms regulated by the FCA that do not fall into (2) or (3). They are

FCA 2018/XX called core SMCR firms. A large number of firms will be in this category. (2) Certain large firms. These are called enhanced scope SMCR firms. Relatively few firms fall into this category. (3) Firms whose business is limited to certain types. These are called limited scope core SMCR firms. A large number of firms will be in this category. The main examples are:
(a) limited permission consumer credit firms; (b) an authorised professional firm whose only regulated activities are non-mainstream regulated activities; (c) internally managed AIFs; and (d) firms whose main business is not regulated and whose regulated business is (with limited exceptions) restricted to insurance distribution activity in relation to non-investment insurance contracts.
23.3 Overview of the senior managers and certification regime
23.3.1 G There are three main elements to the regime:
(1) the senior managers regime;
(2) the certification regime; and
(3) conduct rules that apply directly to a firm’s workforce.
23.3.2 G The table in SYSC 23.3.3G gives more details about each of those three
elements. The first two columns of the table applies to all firms. The third column only covers firms that are not regulated by the PRA.
23.3.3 G Table: Summary of the senior managers and certification regime
Description of component of the regime
Handbook provisions
Application to solo-regulated firms
The senior managers regime: Parts that apply to all firms Pre-approval by the FCA of senior management (the Handbook calls senior management subject to preapproval SMF managers) SUP 10C Applies to all solo-regulated firms

FCA 2018/XX
Firm to be satisfied that a person is fit and proper before applying for them to be approved as an SMF manager by the FCA or PRA This requirement comes from
section 60A of
the Act. There is guidance on it in SUP
10C.10.14G
(Vetting of candidates by the firm)
Applies to all solo-regulated firms
Annual assessment of fitness and propriety by the SMF managers’ firms This requirement comes from
section 63(2A)
of the Act.
There are related notification obligations in SUP 10C.14.18R to SUP 10C.14.25G (Notifications about fitness, disciplinary action and breaches of COCON). Applies to all solo-regulated firms A firm should carry out criminal records checks before applying for someone to be approved as an SMF manager SUP 10C.10.16R (Criminal records checks and verifying fitness and properness) Applies to all solo-regulated firms except for a sole trader without employees A firm should ask for a regulatory reference before appointing someone to be an SMF manager, or to certain other senior management positions, and give one if asked to by another firm doing so SYSC 22 (Regulatory references) Applies to all solo-regulated firms Statements of responsibilities This is a document that sets out the SUP 10C.11 (Statements of Applies to all solo-regulated

FCA 2018/XX responsibilities that an SMF manager performs as part of their designated senior management function. It is prepared as part of the firm’s application to the FCA or PRA for them to be approved as an SMF manager. It should be updated after approval when there has been any significant change in the responsibilities of the SMF manager responsibilities). Many of the requirements are in the Act itself but they are summarised in SUP 10C.11. SUP 10C.11 also adds some further requirements, particularly about there being one statement of responsibilities per SMF manager per firm. firms The senior managers regime: Parts that apply to many firms A firm should allocate certain specified management responsibilities among its SMF managers The Handbook calls them FCAprescribed senior management responsibilities SYSC 24 (Senior managers and certification regime:
Allocation of prescribed responsibilities) Does not apply to a limited scope core SMCR firm Applies to a core SMCR firm and an enhanced scope SMCR firm A firm should carry out criminal records checks before appointing a board director who is not an SMF manager SYSC 23.4 (Criminal record checks for nonexecutive directors) Does not apply to a limited scope core SMCR firm Applies to a core SMCR firm and an enhanced scope SMCR firm The senior managers regime: Parts that only apply to a limited range of firms A firm should maintain a comprehensive and up-to-date document (called the management responsibilities map) that describes its management and governance arrangements SYSC 25 (Senior managers and certification regime:
Management responsibilities
Does not apply to a limited scope core SMCR firm or a core SMCR firm Applies to an enhanced scope

FCA 2018/XX maps and handover procedures and material) SMCR firm A firm should ensure that, at all times, one or more of its SMF managers have overall responsibility for each of the activities, business areas and functions of the firm SYSC 26 (Senior managers and certification regime: Overall and local responsibility) Does not apply to a limited scope core SMCR firm or a core SMCR firm Applies to an enhanced scope SMCR firm A firm should ensure that a person becoming an SMF manager has all the information and material that they could reasonably expect to have to perform their responsibilities SYSC 25.9 (Handover procedures and material) Does not apply to a limited scope core SMCR firm or a core SMCR firm Applies to an enhanced scope SMCR firm The senior managers regime: Parts outside the Handbook Duty of responsibility This applies to SMF managers in all types of firm. This is dealt with in section 66A(5) of the Act. There is guidance on this in DEPP 6.2.9- AG to DEPP 6.2.9-FG. Applies to all solo-regulated firms Criminal offence relating to a decision that causes a financial institution to fail. It applies to a UK SMCR dual regulated banking sector firm but does not apply to a credit union. It does not apply to any firm that is not a UK SMCR dual regulated banking sector firm. This is contained in
section 36 of the
Financial
Services
(Banking
Reform) Act
Does not apply to any soloregulated firm The certification regime A firm should not permit an Most of the Applies to all

FCA 2018/XX employee to carry out certain functions (FCA-specified significantharm functions) unless it has issued them with a certificate. The certificate is only valid for a year. The firm will have to renew it if the employee is to carry on performing the function. A firm may not issue or renew a certificate unless it is satisfied that the person is fit and proper. Certification does not involve preapproval by the FCA or PRA. requirements of this regime are in section 63E (Certification of employees by authorised persons) and 63F (Issuing of certificates) of the Act. SYSC 27 (Senior managers and certification regime:
Certification regime) describes the regime and explains which employees are covered. solo-regulated firms except for internally managed AIFs A firm should ask for a regulatory reference before appointing someone to perform an FCA-specified significant-harm functions (or a PRA equivalent) and give one if asked to by another firm doing so SYSC 22 (Regulatory references) Applies to all solo-regulated firms Conduct rules (applies to all firms) Rules of conduct that apply directly to a firm’s workforce other than ancillary staff COCON Applies to all solo-regulated firms A firm should report breaches of COCON to the FCA SUP 15.11 (Notification of COCON breaches and disciplinary action) Applies to all solo-regulated firms A firm should:
(a) ensure that all persons subject to
COCON are notified of the rules that apply to them; and (b) take all reasonable steps to ensure that they understand how COCON These obligations are in section 64B of the Act (Rules of conduct:
responsibilities
Applies to all solo-regulated firms

FCA 2018/XX applies to them of authorised persons).
There is guidance in
COCON 2.3
(Firms: Training and breaches)
23.3.4 G The PRA has requirements corresponding to the senior managers and
certification regime that apply to PRA-authorised persons. The FCA and PRAs’ regimes are designed to work together and complement each other. A PRA-authorised person will therefore need to consider the PRA’s requirements to get a complete picture of the requirements that apply to it (and its workforce) in the area covered by the senior managers and certification regime and the requirements in the Act on which it is based.
23.4 Criminal record checks for certain directors
23.4.1 R This section applies to a UK SMCR firm that:
(1) is an FCA-authorised person; and
(2) is not a limited scope core SMCR firm.
23.4.2 R A firm must (as part of its assessment of the fitness and propriety of any of
its non-SMF board directors subject to competence requirements (P) obtain the fullest information that it is lawfully able to obtain about P under Part V of the Police Act 1997 (Certificates of Criminal records, etc) and related subordinated legislation of the UK or any part of the UK before P’s appointment as a board director.
23.4.3 G The guidance in SUP 10C.10.17G to SUP 10C.10.18G and SUP
10C.10.21G about criminal record checks (criminal record checks for candidates to be an SMF manager) applies to criminal record checks under this section. 23 Annex Definition of SMCR firm and different types of SMCR firms
Part One: Flow diagram and other basic provisions
1.1 R The flow diagram in SYSC 23 Annex 1 1.2R, defines:
(1) an SMCR firm; and

FCA 2018/XX
(2) the different categories of SMCR firm.
1.2 R Flow diagram: Types of SMCR firm
Are you an exempt firm (see
Part 2 of this annex)? You are not an SMCR firm Yes
Are you an SMCR dual regulated banking sector firm?
You are an SMCR firm.
You are not a core SMCR firm, an enhanced scope SMCR firm or a limited scope core SMCR firm. Yes Are you in the insurance sector as defined in Part 3 of this annex? You are an SMCR firm. You are not a core SMCR firm, an enhanced scope SMCR firm or a limited scope core SMCR firm. Yes No Are you a firm? You are not an SMCR firm No Yes

FCA 2018/XX
1.3 R If a firm is subject to a requirement that it must comply with the rules in
the Handbook applicable to one of the categories of SMCR firm set out in this Annex, it is to be treated as falling into that category of SMCR firm for all purposes.
1.4 G (1) The FCA may, on a case-by-case basis, require a core SMCR firm
to comply with the requirements that apply to an enhanced scope SMCR firm if the FCA considers it appropriate to do so to advance one or more of its operational objectives under the Act. (2) The most common example of a requirement described in SYSC 23
Annex 1 1.3R is likely to be one of the kind described in (1).
Do you meet the requirements for being a limited scope core firm as defined in Part 4 of this annex? You are an SMCR firm and a limited scope core SMCR firm Yes Do you meet one of the qualification conditions for the enhanced requirements in accordance with Parts 6 to 9 of this annex? You are an SMCR firm and an Yes enhanced scope SMCR firm You are an SMCR firm and a core SMCR firm No No Are you excluded from the enhanced regime as defined in Part 5 of this annex? You are an SMCR firm and a Yes core SMCR firm No

FCA 2018/XX
(3) One effect of SYSC 23 Annex 1 1.3R is that if a firm is moved from the core SMCR firm to the enhanced scope SMCR firm category, the FCA-designated senior management functions that will apply to it are the ones for enhanced scope SMCR firms.
Part Two: Definition of exempt firm
2.1 R This part defines an exempt firm for the purposes of the flow diagram in
Part One of this annex.
2.2 R An overseas firm is an exempt firm if it:
(1) does not have; and
(2) does not have an appointed representative that has; an establishment in the United Kingdom.
2.3 R An incoming EEA firm that is an EEA pure reinsurer is an exempt firm.
2.4 R A UCITS qualifier is an exempt firm (see section 266 of the Act
(Disapplication of rules)).
2.5 R An AIFM qualifier is an exempt firm.
Part Three: Definition of insurance sector
3.1 R A firm is in the insurance sector for the purposes of the flow diagram in
Part One of this annex if the firm is:
(1) a Solvency II firm (including a large non-directive insurer); or (2) a small non-directive insurer.
3.2 R (1) A firm from which the Solvency II rules (as defined by the part of
the PRA Rulebook described in this paragraph (1)) are disapplied by
chapter 2 of the Solvency II Firms: Transitional Measures part of
the PRA Rulebook is in the insurance sector for the purposes of the flow diagram in Part One of this annex. (2) A firm defined as a small run-off firm in the Glossary part of the PRA Rulebook is in the insurance sector for the purposes of the flow diagram in Part One of this annex.
Part Four: Definition of limited scope core SMCR firm
4.1 R This part sets out the requirements for being a limited scope core firm for
the purposes of the flow diagram in Part One of this annex.
4.2 R A firm listed in the table in SYSC 23 Annex 1 4.3R is a limited scope core
firm if:

FCA 2018/XX
(1) its principal purpose is to carry on activities other than regulated activities; and (2) it is not a MiFID investment firm.
4.3 R Table: List of limited scope core SMCR firms referred to in SYSC 23
Annex 1 4.2R
(1) Oil market participant
(2) Service company
(3) Energy market participant
(4) A wholly owned subsidiary of:
(a) a local authority; or
(b) a registered social landlord
(5) A firm with permission to carry on insurance distribution activity in relation to non-investment insurance contracts but no other regulated activity (except advising on P2P agreements)
4.4 G It will be a matter of fact in each case whether, having regard to all the
circumstances, including in particular where the balance of the business lies, a firm’s principal purpose is to carry on activities other than regulated activities. If a firm wishes to rely on SYSC 23 Annex 1 4.2R, it should be in a position to demonstrate that its principal purpose is to carry on activities other than regulated activities.
4.5 R A sole trader is a limited scope core firm.
4.6 R A firm whose permission is limited to the carrying on of a relevant credit
activity (as defined in paragraph 2G of Schedule 6 to the Act) (a limited permission) is a limited scope core firm.
4.7 R A not-for-profit debt advice body is a limited scope core firm.
4.8 R An authorised professional firm whose only regulated activities are nonmainstream regulated activities is a limited scope core firm.
4.9 R A firm is a limited scope core firm if it meets the following conditions:
(1) it is an internally managed AIF;
(2) it is a body corporate; and

FCA 2018/XX
(3) it is not a collective investment scheme.
Part Five: Exclusion from enhanced regime
5.1 R This part sets out which firms are excluded from the enhanced regime for
the purposes of the flow diagram in Part One of this annex.
5.2 R A non-UK SMCR firm is excluded from the enhanced regime.
5.3 R A firm is excluded from the enhanced regime if its permission only covers
being the full-scope UK AIFM of:
(1) an unauthorised AIF; or
(2) an authorised AIF only marketed to investors that are professional clients.
5.4 R A firm is excluded from the enhanced regime if:
(1) it is exempt from MiFID under article 2(1)(j); and (2) its only permission is bidding in emissions auctions.
Part Six: Financial qualification condition for being an enhanced scope SMCR
firm
6.1 R A firm meets a qualification condition for the purposes of identifying an
enhanced scope SMCR firm under the flow diagram in Part One of this
annex if it meets one of the criteria set out in column (1) of the table in
SYSC 23 Annex 1 6.2R.
6.2 R Table: Financial qualification conditions
Qualification condition Reporting requirement (1) The firm has (or has had at any time in the previous three years) assets under management of £50 billion or more Assets under management are calculated in accordance with the method that must be used to calculate the amount to be recorded in data element 1A (Total funds under management) in data item FSA038 (Volumes and Type of Business) (2) The firm’s current total intermediary regulated business revenue is £35 million per annum or more Total intermediary regulated business revenue is calculated in accordance with the method that must be used to calculate the amount to be recorded in data element 4E (Total regulated business revenue) in Section B (Profit and Loss account) of the RMAR (3) The firm’s annual revenue generated by Annual revenue generated by regulated

FCA 2018/XX regulated consumer credit lending is £100 million or more consumer credit lending is calculated as follows:
(a) calculate each amount that must be recorded in column B (Revenue) for the rows headed “Lending” in data item CCR002 (Consumer Credit data:
Volumes); and
(b) add those amounts together.
(4) The firm currently has 10,000 or more outstanding regulated mortgages A firm’s outstanding regulated mortgages are calculated as follows:
(a) calculate the amount that must be recorded in row E4.5 (Total) in the box under the headings and sub-headings “Regulated Loans”, “Balances outstanding” and “Number” in the MLAR; (b) calculate the amount that must be recorded in row G1.1(d) (total) under the headings and sub-headings “As PRINCIPAL administrator” and “Regulated loans” in the MLAR; and (c) add those amounts together.
6.3 G (1) Column (2) of the table in SYSC 23 Annex 1 6.2R refers to the
Handbook versions of the relevant data items.
(2) The boxes referred to in row (4) (outstanding regulated mortgages) correspond to the online version of the MLAR as follows:
(a) paragraph (a) corresponds to data item c3; and (b) paragraph (b) corresponds to data item G1.1 c1 (d).
6.4 R If the applicable financial reporting requirements in column (2) of the
table in SYSC 23 Annex 1 6.2R have changed during the relevant period,
the calculations must be made in accordance with whatever requirements applied for the applicable period.
6.5 R The calculations are made on a solo basis.
6.6 R (1) The calculation periods and dates in column (1) of the table in
SYSC 23 Annex 1 6.2R are defined so as to be consistent with the financial reporting periods and dates used for the corresponding data item in column (2) of that table. The rest of this rule gives

FCA 2018/XX particular examples of this principle.
(2) If a calculation in column (1) of the table in SYSC 23 Annex 1 6.2R is on a per annum or annual basis, then:
(a) if the reporting period in column (2) is based on the firm’s accounting period, so is the calculation period in column (1); and (b) if the reporting period in column (2) is based on a calendar year, so is the calculation period in column (1). (3) (a) Where row (2) or (3) of column (1) of the table in SYSC 23
Annex 1 6.2R refers to a firm’s current financial figures it
refers to the figures for its most recent calculation period in column (1). (b) The most recent calculation period is the one ending on the end date of the reporting period for the firm’s most recent data item in column (2). (4) The current figure in row (1) or (4) of column (1) of the table in SYSC 23 Annex 1 6.2R is the one for the firm’s most recent data item in column (2). (5) A firm’s most recent data item is the one whose required submission date has passed most recently.
6.7 R Where:
(1) the calculation in column (1) of the table in SYSC 23 Annex 1 6.2R is based on annual or per annum revenue; and (2) the reporting period in column (2) is based on the firm’s accounting period; but (3) the firm’s accounting period is not twelve months; the firm must adjust the financial figure in column (1) proportionately.
6.8 R A qualification condition does not apply to a firm if:
(1) the corresponding reporting requirement referred to in column (2) of the table in SYSC 23 Annex 1 6.2R does not apply to the firm; or (2) the firm has not been subject to the relevant reporting requirements for long enough for the calculation to be made for that qualification condition.
6.9 G (1) The financial reporting period in column (2) of the table in SYSC 23
Annex 1 6.2R may be shorter than the corresponding calculation
period in column (1) of that table.

FCA 2018/XX
(2) For example, the calculation period in column (1) may be based on annual revenue but the firm may have to prepare the corresponding data item in column (2) for revenue arising in six-month periods. (3) In this example, the calculation in column (1) is based on the most recently ended six-month period and the six-month period before that. (4) This applies whether the financial reporting periods in column (2) are based on a firm’s accounting periods or on the calendar year. (5) See SYSC 23 Annex 1 6.7R for special requirements where a firm has an accounting period of more or less than a year, which might be caused, for example, by the firm changing its accounting reference date.
Part Seven: Other qualification conditions for being an enhanced scope SMCR
firm
7.1 R A firm meets a qualification condition for the purposes of identifying an
enhanced scope SMCR firm under the flow diagram in Part One of this
annex if it meets one of the following criteria:
(1) the firm is a significant IFPRU firm; or (2) the firm is a CASS large firm.
7.2 G If a firm is subject to a requirement that it must comply with the rules in
the Handbook applicable to one of the categories of firm in SYSC 23
Annex 1 7.1R it is to be treated as falling into that category of firm for the
purpose of this Annex as well.
Part Eight: When a firm becomes an enhanced scope SMCR firm
Meeting the financial thresholds in Part 6
8.1 R A firm that:
(1) was not an enhanced scope SMCR firm; and (2) then meets one of the qualification conditions in Part 6 of this
Annex (financial qualification conditions);
must comply with the requirements for enhanced scope SMCR firms (and becomes an enhanced scope SMCR firm) from six months after the data item submission date for the calculation period in column 1 of the table in SYSC 23 Annex 1 6.2R for which the firm first meets that qualification condition.
8.2 R (1) The data item submission date for a calculation period in column
(1) of the table in SYSC 23 Annex 1 6.2R is the date on which the data item for the corresponding financial reporting period in

FCA 2018/XX column (2) of that table should be submitted.
(2) Where a firm must use data items from more than one financial reporting period to make a calculation required by column (1) of the table, the data item submission date is the due date for submission of the data item for the most recent such financial reporting period. Meeting the qualification conditions in Part 7
8.3 R A firm that:
(1) was not an enhanced scope SMCR firm; and (2) then meets one of the qualification conditions in Part 7 of this
annex (other qualification conditions);
must comply with the requirements for enhanced scope SMCR firms (and becomes an enhanced scope SMCR firm) from six months after the date that the status in SYSC 23 Annex 1 7.1R becomes effective.
8.4 G SYSC 23 Annex 1 8.3R means that a firm becomes an enhanced scope
SMCR firm on the date in column (2) of the table in SYSC 23 Annex 1 8.5G.
8.5 G Table: Date firm becomes an enhanced scope firm
Qualification condition Date firm becomes an enhanced scope SMCR The firm is a significant IFPRU firm Six months after the date in IFPRU 1.2.6R(2). The firm is a CASS large firm This includes a firm that has elected to be treated as a CASS large firm Six months after the date in CASS 1A.2.12R.
8.6 G (1) The purpose of the six-month period between meeting the
conditions for being an enhanced scope SMCR firm and the firm becoming subject to the requirements for such firms is to allow it to make preparations to comply with the new requirements. (2) For example, a firm that used to be a core SMCR firm should use this period to apply for approval for its personnel to perform the new designated senior management functions that will apply because it has become an enhanced scope SMCR firm.
8.7 G (1) A firm retains its old status during the six-month period described
in this Part.

FCA 2018/XX
(2) For example, a core SMCR firm that meets one of the qualification conditions for being an enhanced scope SMCR firm will remain as a core SMCR firm for six months after it meets the qualification condition.
Part Nine: When a firm stops being an enhanced scope SMCR firm
Introduction
9.1 R A firm that:
(1) was an enhanced scope SMCR firm; and (2) then meets none of the qualification conditions in this Annex, ceases to be subject to the requirements for enhanced scope SMCR firms (and ceases to an enhanced scope SMCR firm) on the date set out in this
Part.
Ceasing to meet the financial thresholds in Part 6
9.2 R Where the last qualification condition that an enhanced scope SMCR firm
meets is one of the conditions in Part 6 of this annex (financial qualification conditions), a firm ceases to be subject to the requirements for enhanced scope SMCR firms one year after the data item submission date for the calculation period in column (1) of the table in SYSC 23
Annex 1 6.2R for which the firm first ceases to meet that qualification
condition.
9.3 G See SYSC 23 Annex 1 8.2R for what data item submission date means.
Ceasing to meet the qualification conditions in Part 7
9.4 R Where the last qualification condition that an enhanced scope SMCR firm
meets is one of the conditions in Part 7 of this annex (other qualification conditions), a firm ceases to be subject to the requirements for enhanced scope SMCR firms one year after the date that the status in SYSC 23
Annex 1 7.1R ceases to apply.
Remaining as an enhanced scope firm
9.5 R If:
(1) the one year period in SYSC 23 Annex 1 9.2R or SYSC 23 Annex 1 9.4R is still running; and (2) the firm again meets a qualification condition in Part Six or Seven of this annex; then:

FCA 2018/XX
(3) the firm remains an enhanced scope SMCR firm; and (4) the six-month period in Part 8 of this annex does not apply. Amend the following as shown. In accordance with paragraph F to this instrument, cross references amended in column A in the tables of Annex A are so changed in the text of the following provisions. These changes are not shown. 24 Senior managers and certification regime: Allocation of prescribed responsibilities
24.1 Application
Main application rules
24.1.1
4.7.1
R This section chapter applies to UK relevant authorised persons an SMCR firm, except to the extent that this chapter applies a narrower scope to a particular provision. However, this chapter does not apply to:
(1) a limited scope core SMCR firm; or
(2) an EEA SMCR firm.
24.1.2
4.7.3
R This section chapter is not limited to regulated activities or other specific types of activities. Territorial scope 24.1.3 4.7.2 R There is no territorial limitation on the application of this section chapter, subject to SYSC 24.1.5R.
24.1.4 R When this chapter applies to a non-UK SMCR firm, it applies in relation to
the activities of the firm’s branch in the United Kingdom.
24.2 Allocation of FCA-prescribed senior management responsibilities: Main
allocation rules
Allocation of FCA-prescribed senior management responsibilities 24.2.1 4.7.5(1) R A firm must allocate each of the FCA-prescribed senior management responsibilities in Part 1 of the table in SYSC 24.2.6R that apply to it to one or more SMF managers of the firm.
24.2.2 G (1) Subject to (2), SYSC 24 Annex 1 (Which prescribed responsibilities
apply to which kind of firm) sets out which FCA-prescribed senior management responsibilities apply to which kind of SMCR firm.

FCA 2018/XX
(2) Each FCA-prescribed senior management responsibility in Part Four of the table in SYSC 24.2.6R (functions applying in specified situations) is subject to further restrictions on the types of firm and circumstances to which it applies, as set out in that Part. 24.2.3 4.7.5(5) R (1) A firm may not allocate an FCA-prescribed senior management responsibility to an SMF manager who is only approved to perform the other overall responsibility function or the other local responsibility function for that firm, subject to (6) (2). 4.7.5(6) (2) A firm may allocate the FCA-prescribed senior management responsibility (z) in row (11) of the table in SYSC 24.2.6R (functions in relation to CASS) to an SMF manager who is only approved to perform the other overall responsibility function or the other local responsibility function. 24.2.4 4.7.5(7) R A firm must make the allocations of FCA-prescribed senior management responsibilities in this rule chapter in such a way that it is clear who has which of those responsibilities. What the FCA-prescribed senior management responsibilities are 24.2.5 4.7.6 R The FCA-prescribed senior management responsibilities are set out in the
table in SYSC 24.2.6R.
24.2.6
4.7.7
R Table: FCA-prescribed senior management responsibilities
Part One (applies to all firms)
FCA-prescribed senior management responsibility Explanation Equivalent PRAprescribed senior management responsibility Reference letter (1) Responsibility for the firm’s performance of its obligations under the senior management managers regime The senior management managers regime means the requirements of the regulatory system applying to relevant authorised persons SMCR firms insofar as they relate to SMF managers performing designated senior management functions, PRA-prescribed senior management responsibility 4.1(1) (a)

FCA 2018/XX including SUP 10C
(FCA senior management managers regime for approved persons in relevant authorised persons). This responsibility includes:
(1) compliance with conditions and time limits on approval; (2) compliance with the requirements about the statements of responsibilities (but not the allocation of responsibilities recorded in them); (3) compliance by the firm with its obligations under
section 60A of the Act
(Vetting of candidates by relevant authorised persons); and (4) compliance by the firm with the requirements in SYSC 22 (Regulatory references) so far as they relate to the senior management managers regime, including the giving of references to another firm about an SMF manager or former SMF manager. (2) Responsibility for the firm’s performance of its obligations under the employee certification regime The employee certification regime means the requirements of sections 63E and 63F of the Act (Certification of employees) and all PRA-prescribed senior management responsibility 4.1(2) (b)

FCA 2018/XX other requirements of the regulatory system about the matters dealt with in those sections, including:
(1) SYSC 27 ( Senior managers and certification regime:
Certification Regime);
(2) the requirements in
SYSC 22 (Regulatory references) so far as they relate to the employee certification regime, including the giving of references to another firm about a certification employee or former certification employee; and (3) the corresponding PRA requirements. (3) Responsibility for compliance with the requirements of the regulatory system about the management responsibilities map This responsibility does not include allocating responsibilities recorded in it PRA-prescribed senior management responsibility 4.1(3) (4) (3) Overall responsibility Responsibility for the firm’s policies and procedures for countering the risk that the firm might be used to further financial crime (1) This includes the function in:
(a) responsibility for the firm’s policies and procedures in relation to the matters in SYSC 3.2.6R (Systems and controls in relation to compliance, financial crime and money laundering); (b) the function in SYSC 6.3.8R (firm must allocate to a director or senior manager overall responsibility within None (d)

FCA 2018/XX the firm for the establishment and maintenance of effective anti-money laundering systems and controls); , if that any of those rule rules applies apply to the firm. (2) The firm may allocate this FCAprescribed senior management responsibility to the MLRO but does not have to. (3) If the firm does not allocate this FCAprescribed senior management responsibility to the MLRO, this FCAprescribed senior management responsibility includes responsibility for supervision of the MLRO. (4) Responsibility for the firm’s obligations in relation to conduct rules for:
(a) training; and
(b) reporting
(1) The firm’s training obligations means its obligations under
section 64B of the Act
(Rules of conduct:
responsibilities of authorised persons).
(b-1)
(2) The firm’s reporting obligations means its obligations under section 64C of the Act (Requirement for authorised persons to notify regulator of disciplinary action). (3) Conduct rules means the rules in

FCA 2018/XX
Part Two (only applies to all firms except for small CRR firms and credit
unions certain banks and insurance sector firms) FCA-prescribed senior management responsibility Explanation Reference letter (5) (1) Responsibility for:
(a) leading the development of; and
(b) monitoring the effective implementation of; policies and procedures for the induction, training and professional development of all members of the firm’s governing body. PRA-prescribed senior management responsibility 4.1(13) (f) (6) (2) Responsibility for monitoring the effective implementation of policies and procedures for the induction, training and professional development of all persons performing designated senior management functions on behalf of the firm other than members of PRA-prescribed senior management responsibility 4.1(5) (g) COCON and the corresponding rules made by the PRA under section 64A of the Act (Rules of conduct). (4A) Acting as the firm’s whistleblowers’ champion The whistleblowers’ champion’s allocated responsibilities are set out in SYSC 18.4.4R

FCA 2018/XX the governing body.
Part Three (only applies to certain solo-regulated firms)
FCA-prescribed senior management responsibility Explanation Reference letter (1) Responsibility for the development and maintenance of the firm’s business model by the governing body. Business model means the same thing as it does in Schedule 6 to the Act (Threshold Conditions). This responsibility applies even if the business model threshold condition does not apply to it. (t) (2) Responsibility for ensuring the firm’s governing body is informed of its legal and regulatory obligations. (dd)
Part Four (functions applying in specified situations)
FCA-prescribed senior management responsibility Explanation Reference letter (1) Responsibility for compliance with the requirements of the regulatory system about the management responsibilities map This responsibility does not include allocating responsibilities recorded in it. This responsibility does not apply to a firm to which the requirements about management responsibilities maps in SYSC 25 (Senior managers and certification regime:
Management responsibilities maps
(c)

FCA 2018/XX and handover procedures and material) do not apply. (2) Acting as the firm’s whistleblowers’ champion The whistleblowers’ champion’s allocated responsibilities are set out in SYSC 18.4.4R. This responsibility does not apply to a firm that is not required to have a whistleblowers’ champion. (n) (7) (3) Responsibility for:
(a) safeguarding the independence of; and (b) oversight of the performance of; the internal audit function, in accordance with SYSC 6.2 (Internal Audit) or article 24 of the MiFID Org Regulation the internal audit requirements for SMCR firms. (1) In the case of a PRA-authorised firm, This this responsibility includes responsibility for:
(a) safeguarding the independence of; and (b) oversight of the performance of; a person approved to perform the PRA’s Head of Internal Audit designated senior management function for the firm if that function applies to the firm. PRA-prescribed senior management responsibility 4.1(15) (j) (2) This responsibility only applies if and to the extent that:
(a) the internal audit requirements for SMCR firms or the PRA requirements listed in paragraph (1) of this column apply to the firm; and (b) the firm is required to ensure the things in column (1) or that paragraph. (8) (4) Responsibility (1) This responsibility PRA-prescribed senior

FCA 2018/XX for:
(a) safeguarding the independence of; and (b) oversight of the performance of; the compliance function in accordance with SYSC 6.1 (Compliance) or article 22 of the MiFID Org Regulation the compliance requirements for SMCR firms. includes responsibility for:
(a) safeguarding the independence of; and (b) oversight of the performance of; the person performing the compliance oversight function for the firm. (2) This responsibility only applies if and to the extent that:
(a) the compliance requirements for SMCR firms or the PRA requirements listed in paragraph (1) of this column apply to the firm; and (b) the firm is required to ensure the things in column (1) or that paragraph. management responsibility 4.1(16) (k) (9) (5) Responsibility for:
(a) safeguarding the independence of; and (b) oversight of the performance of; the risk function, in accordance with SYSC 7.1.21R and SYSC 7.1.22R (Risk control) the risk control requirements for SMCR firms. (1) In the case of a PRA-authorised firm, This this responsibility includes responsibility for:
(a) safeguarding the independence of; and (b) oversight of the performance of; a person approved to perform the PRA’s Chief Risk designated senior management function for the firm if that function applies to the firm. (2) This responsibility only applies if and to the extent that:
(a) the risk control
PRA-prescribed senior management responsibility 4.1(17) (l)

FCA 2018/XX requirements for SMCR firms or the PRA requirements listed in paragraph (1) of this column apply to the firm; and (b) the firm is required to ensure the things in column (1) or that paragraph. (10) (6) Responsibility for overseeing the development of and implementation of the firm's remuneration policies and practices in accordance with SYSC 19D (Dualregulated firms Remuneration Code) This responsibility does not apply to a firm to which SYSC 19D does not apply. PRA-prescribed senior management responsibility 4.1(18) (m) (11) Overall responsibility (7) Responsibility for the firm’s compliance with CASS (A) (1) This responsibility only applies to a firm to which CASS applies. (B) (2) A firm may include in this FCAprescribed senior management responsibility whichever of the following functions apply to the firm:
(a) CASS 1A.3.1R
(certain CASS compliance functions for a CASS small firm); (b) CASS 1A.3.1AR (certain CASS compliance functions for a CASS medium firm or a CASS large firm); (c) CASS 11.3.1R (certain CASS compliance functions for certain CASS small None (z)

FCA 2018/XX debt management firms); or
(d) CASS 11.3.4R
(certain CASS compliance functions for a CASS large debt management firm); but it does not have to. (C) (3) If the firm does not include the functions in (B) (2) in this FCA-prescribed senior management responsibility, this FCA-prescribed senior management responsibility includes responsibility for supervision of the person performing the functions in (B) (2) that apply to the firm. (8) Responsibility for taking reasonable steps to ensure that every person involved in the performance of the firm’s internal audit function is independent from the persons who perform external audit, including:
This only applies if the firm outsources its internal audit function (j-3) (a) supervision and management of the work of outsourced internal auditors; and (b) management of potential conflicts of interest between the provision of external audit and internal audit services. (9) Responsibility for:
(a) managing the firm’s internal stress tests; and Stress testing refers to stress testing under SYSC 20 (Reverse (s)

FCA 2018/XX
(b) ensuring the accuracy and timeliness of information provided to the FCA and other regulatory bodies for the purposes of stress testing. stress testing). This responsibility only applies to a firm to which SYSC 20 applies. (10) Responsibility for:
(a) providing for an effective internal audit function in accordance with one of the sections of the PRA Rulebook listed in paragraph (2) of column (2); and (b) overseeing the performance of the internal audit function. (1) Only applies to a firm:
(a) that outsources its internal audit function to an external third party service provider; and (b) to which one of the following internal audit PRA-prescribed senior management responsibilities applies:
(i) the responsibility in rule 3.3(1) in the Insurance – Allocation of Responsibilities Part of the PRA Rulebook; or (ii) the responsibility in rule 3.2(1) in the Large Non-Solvency II Firms – Allocation of Responsibilities Part of the PRA Rulebook. (2) The parts of the PRA Rulebook referred to in column (1) are:
(a) Solvency II firms -
Conditions Governing
Business 5; and
(b) Non-Solvency II
Firms – Governance
9.2.
(3) Terms used in column (1) have the same meaning as they do for the corresponding PRAprescribed senior (j-2)

FCA 2018/XX management responsibility described in paragraph (1) of this column. (11) The responsibilities allocated under COLL 6.6.27R or COLL 8.5.22R (Allocation of responsibility for compliance to an approved person). Only applies to a firm to which the rules in column (1) apply. (za)
Part Five (only applies to branches)
FCA-prescribed senior management responsibility Explanation Reference letter (1) Responsibility for management of the firm’s risk management processes in the UK (aa) (2) Responsibility for the firm’s compliance with the UK regulatory system applicable to the firm (ff) (3) Responsibility for the escalation of correspondence from the PRA, FCA and other regulators in respect of the firm to the governing body and/or the management body of the firm or, where appropriate, of the parent undertaking or holding company of the firm’s group This includes taking steps to ensure that the senior management of the firm and, where applicable, the group, are made aware of any views expressed by the regulatory bodies and any steps taken by them in relation to the branch, firm or group. (ee)

FCA 2018/XX
24.3 Who functions prescribed responsibilities should be allocated to
Seniority and authority
24.3.1
4.7.24
(3)
G In general, the The FCA expects that a person who has responsibility for an FCA-prescribed senior management responsibility in (2):
(1) will generally (in the case of the FCA-prescribed senior management responsibilities in SYSC 24.3.3G(1)) be the most senior employee or officer responsible for managing that area (or the most senior below the chief executive); and (2) will:
(a) be sufficiently senior and credible; and (b) have sufficient resources and authority; to be able to exercise their management and oversight responsibilities effectively. Executive or non-executive 24.3.2 4.7.24(1) G The FCA expects that normally a firm will allocate the FCA-prescribed senior management responsibility in rows with the following FCA reference letters (5), (7), (8), (9) and (10) (see column three of the table in SYSC 24.2.6R) to an SMF manager who is a non-executive director of the firm (or, in the case of a partnership, a partner without management responsibilities):
(1) (f) (development of members of governing body); (2) (j) (internal audit oversight); (3) (k) (compliance oversight); (4) (l) (risk control oversight); (5) (m) (remuneration code oversight); and (6) (n) (whistleblower’s champion). 24.3.3 4.7.24 (2) G (1) The Subject to (2), the FCA expects that normally a firm will allocate: (a) the other FCA-prescribed senior management responsibilities; and (b) functions under SYSC 4.7.8R (Allocation of overall responsibility for a firm’s activities, business areas and management functions); to an SMF manager who performs executive functions for the firm.

FCA 2018/XX
(2) The relevant rules in COLL deal with the persons to whom a firm should allocate FCA-prescribed senior management responsibility (za) (COLL value for money assessment and independent director requirements). Exceptions for small non-complex firms 24.3.4 4.7.24 (5) G The FCA accepts that it may not be practical for a small non-complex firm (see SYSC 4.5.13G) to comply with the parts of (1), (2) and (3) SYSC 24.3.1G(1), SYSC 24.3.2G and SYSC 24.3.3G(1) that would otherwise apply to it. 24.3.5 4.5.13(2) G (1) A firm UK SMCR dual regulated banking sector firm is likely to be small and non-complex for these the purposes in SYSC 24.3.4G if :
(a) it is:
(a)
(i) a small CRR firm as defined in the part of the PRA’s rulebook PRA Rulebook called “Allocation of responsibilities”; or (b) (ii) a credit union that meets the PRA’s size requirements for small CRR firms as defined under the PRA’s requirements in (a)(i); . (2) A firm is likely to be non-complex for these purposes if:
(a)
(b) it conducts a limited number of simple business lines; and (b) (c) it does not rely on group governance arrangements; and (c) (in the case of a branch) it does not rely on governance arrangements for other parts of the firm. Not assigning too many responsibilities to one person
24.3.6 G When deciding how to allocate FCA-prescribed senior management
responsibilities, a firm should avoid assigning such a wide range of responsibilities to a particular SMF manager that they are not able to carry out those responsibilities effectively. Dividing and sharing management functions between different people 24.3.7 4.7.25(1) G The FCA expects that a firm will not normally split an FCA-prescribed senior management responsibility between several SMF managers, with each only having responsibility for part. 24.3.8 4.7.25(2) G The FCA expects that a firm will not normally allocate responsibility for:

FCA 2018/XX
(a) an FCA-prescribed senior management responsibility; or (b) a function under SYSC 4.7.8R (Allocation of overall responsibility for a firm’s activities, business areas and management functions); to two or more SMF managers jointly. 24.3.9 4.7.26 G (1) Although the norm should be for a firm to have a single individual performing each FCA-prescribed senior management responsibility or function allocated under SYSC 4.7.8R (Allocation of overall responsibility for a firm’s activities, business areas and management functions), there may be circumstances in which responsibilities can be divided or shared (see (2)). (2) A firm should only divide or share a responsibility where this is appropriate and can be justified. (3) For example, it would be justified to share a function or responsibility if that is done:
(a) as part of a job share; or
(b) where departing and incoming senior managers work together temporarily as part of a handover (4) A firm may have co-heads of a department or business unit if this can be justified under (1) to (3). 24.3.10 4.7.27 G (1) The FCA expects a firm to divide and allocate responsibilities under:
this chapter
(a) SYSC 4.7.5R (Allocation of FCA-prescribed senior management responsibilities); and (b) SYSC 4.7.8R (Allocation of overall responsibility for a firm’s activities, business areas and management functions); between its SMF managers so that responsibilities are grouped together appropriately. (2) The firm should make the judgement:
(a) in (1); and
(b) about whether and how responsibilities and functions should be shared; under:
(c) SYSC 4.1.1R (robust governance arrangements); and

FCA 2018/XX
(d) any other applicable Handbook requirements, including SYSC 4.7.25G and SYSC 4.7.26G SYSC 2 (Apportionment of Responsibilities) and SYSC 24.3.7G to SYSC 24.3.9G; and (e) article 21 of the MiFID Org Regulation (General organisational requirements) or other similar relevant and directly applicable EU legislation. (3) The firm should take into account the way it is organised, the business it carries out and the need not to allocate too many responsibilities to one individual (see SYSC 4.7.23G SYSC 24.3.6G). (4) The FCA expects a firm to allocate FCA-prescribed senior management responsibilities and responsibilities allocated under SYSC 4.7.8R (Allocation of overall responsibility for a firm’s activities, business areas and management functions) to the SMF managers they are most closely linked to. 24.3.11 4.7.28 G SUP 10C.11.31G to SUP 10C.11.33G (Statements of responsibilities) contains material about:
(1) how to prepare statements of responsibilities where a responsibility or function is shared or divided between several SMF managers; and (2) dividing and sharing responsibilities. 24.3.12 4.7.29 G (1) A firm may allocate more than one FCA-prescribed senior management responsibility to the same SMF manager. (2) This is subject to:
(a) SYSC 4.7.23G SYSC 24.3.6G (should not give too many responsibilities to one person); and (b) SYSC 24.3.10G (what responsibilities should be grouped together). Allocation of responsibilities and territorial scope. 24.3.13 4.7.30 G (1) As explained in SYSC 24.1.3R, there is no territorial limitation to the application of this section chapter. (2) This means that a firm should allocate:
(a) the FCA-prescribed senior management responsibilities; and (b) overall responsibilities under SYSC 4.7.8R; so that they cover activities, transactions, business areas and management functions that are located or take place wholly or partly

FCA 2018/XX outside, as well as ones in, the United Kingdom. 24.3.14 4.8.8 G The In the case of a non-UK SMCR firm, the FCA-prescribed senior management responsibilities relate to the activities of the third-country relevant authorised person’s firm’s branch in the United Kingdom (see SYSC 24.1.5R). After SYSC 24 (Senior managers and certification regime: Allocation of prescribed responsibilities) insert a new SYSC 24 Annex 1. The text is not underlined.
Annex 1
Which FCA-prescribed senior management responsibilities apply to which kind of firm Introduction and exclusions
1.1 G This annex sets out which FCA-prescribed senior management
responsibilities apply to which type of SMCR firm.
1.2 R In this annex:
(1) a  means that the FCA-prescribed senior management responsibility does apply; (2) a × means that the FCA-prescribed senior management responsibility does not apply; and (3) a reference letter refers to the reference letters in the table in SYSC 24.2.6R (Table: FCA-prescribed senior management responsibilities).
1.3 G If an FCA-prescribed senior management responsibility is not included in
the table for a particular class of firm that means that FCA-prescribed senior management responsibility does not apply to any firm in that class.
1.4 R The following FCA-prescribed senior management responsibilities do not
apply to a full-scope UK AIFM in relation to its managing an AIF:
(1) responsibility (j) (internal audit oversight); (2) responsibility (k) (compliance oversight); (3) responsibility (l) (risk oversight); (4) responsibility (j-3) (independence of outsourced internal audit); (5) responsibility (t) (business model); and

FCA 2018/XX
(6) responsibility (dd) (informing governing body of obligations). Banking sector firms
2.1 R (1) The table in SYSC 24 Annex 1 2.3R sets out which FCA-prescribed
senior management responsibilities apply to which type of SMCR dual regulated banking sector firm. (2) SMCR firms in (1) are divided into the following categories for the purposes of in (1):
(a) a UK SMCR dual regulated banking sector firm (excluding firms in (b)); (b) a small UK SMCR dual regulated banking sector firm; and (c) a third-country SMCR dual regulated banking sector firm.
2.2 R A small UK SMCR dual regulated banking sector firm means a UK SMCR
dual regulated banking sector firm that is:
(1) a small CRR firm as defined in the part of the PRA Rulebook called “Allocation of responsibilities”; or (2) a credit union.
2.3 R Table: FCA-prescribed senior management responsibilities applying to
banking sector firms
Brief description of responsibility
Reference letter of responsibility
UK firm Small UK firm
Thirdcountry firm
Responsibility for the firm’s performance of its obligations under the senior managers regime (a)    Responsibility for the firm’s performance of its obligations under the employee certification regime (b)    Financial crime (d)    COCON (b-1)    Training governing body (f)  × × Training of staff performing designated senior management (g)  × ×

FCA 2018/XX responsibilities
Management responsibilities maps
(c)   
Whistleblowers’ champion (n)   ×
Internal audit oversight (j)  × ×
Compliance oversight (k)  × ×
Risk oversight (l)  × ×
Remuneration (m)  × ×
CASS (z)   
UK risk management (aa) × × 
Compliance with UK regulatory system
(ff) × × 
Escalation of correspondence (ee) × × 
Note: the categories of firm in the column headings of this table are to be interpreted in accordance with the classification of firms in SYSC 24 Annex 1 2.1R. Therefore:
(1) Column three (UK firm) refers to SYSC 24 Annex 1 2.1R(2)(a); (2) Column four (Small UK firm) refers to SYSC 24 Annex 1 2.1R(2)(b); and (3) Column five (Third-country firm) refers to SYSC 24 Annex 1 2.1R(2)(c). Insurance sector firms
3.1 R (1) The table in SYSC 24 Annex 1 3.2R sets out which FCA-prescribed
senior management responsibilities apply to which type of Solvency II firm (including a large non-directive insurer) and to a small nondirective insurer. (2) SMCR firms in (1) are divided into the following categories for the purposes in (1):
(a) a Solvency II firm (excluding firms in any other paragraph); (b) a firm falling within paragraph (b) of the definition of Solvency II firm (third country branch); (c) a small non-directive insurer; (d) a firm in SYSC 23 Annex 1 3.2R (firms in run-off); and

FCA 2018/XX
(e) an insurance special purpose vehicle.
(3) An insurance special purpose vehicle only falls into paragraph (2)(e). Subject to that a firm in (2)(d) does not fall into any other paragraph.
3.2 R Table: FCA-prescribed senior management responsibility applying to
insurance sector firms
Brief description of responsibility
Reference letter of responsibility
Solvency
II firm
Third country branches
Other insurance sector
ISPV
Responsibility for the firm’s performance of its obligations under the senior managers regime (a)     Responsibility for the firm’s performance of its obligations under the employee certification regime (b)     Financial crime (d)     COCON (b-1)     Training governing body (f)  × × × Training of staff performing designated senior management responsibilities (g)  × × × Management responsibilities maps (c)   × × Whistleblowers’ champion (n)  × × × CASS (z)    × Internal audit for nonsignificant insurers (j-2)  × × × Compliance with UK regulatory system (ff) ×  × × Escalation of (ee) ×  × ×

FCA 2018/XX correspondence
Note: The categories of firm in the column headings of this table are to be interpreted in accordance with the classification of firms in SYSC 24 Annex 1 3.1R. Therefore:
(1) Solvency II firm (column three) refers to SYSC 24 Annex 1 3.1R(2)(a); (2) Third country branches (column four) refers SYSC 24 Annex 1 3.1R(2)(b); (3) Other insurance sector (column five) refers to SYSC 24 Annex 1 3.1R(2)(c) and (d); and (4) ISPV (column six) refers SYSC 24 Annex 1 3.1R(2)(e). Solo regulated firms
4.1 R (1) The table in SYSC 24 Annex 1 4.2R sets out which FCA-prescribed
senior management responsibilities apply to which type of core SMCR firm and enhanced scope SMCR firm. (2) SMCR firms in (1) are divided into the following categories for the purposes of in (1):
(a) UK core SMCR firm;
(b) non-UK core SMCR firm (excluding an EEA SMCR firm); and (c) enhanced scope SMCR firm.
4.2 R Table: FCA-prescribed senior management responsibility applying to solo
regulated firms
Brief description of responsibility
Reference letter of responsibility
UK core firm
Third country core firm
Enhanced scope firm
Responsibility for the firm’s performance of its obligations under the senior managers regime (a)    Responsibility for the firm’s performance of its obligations under the employee certification regime (b)    Financial crime (d)    COCON (b-1)   

FCA 2018/XX
Management responsibilities maps
(c) × × 
Internal audit oversight (j) × × 
Compliance oversight (k) × × 
Risk oversight (l) × × 
CASS (z)   
Independence of outsourced internal audit (j-3) × ×  Business model (t) × ×  Stress tests (s) × ×  Informing governing body of obligations (dd)  × × COLL value for money assessment and independent director requirements) (za)    UK risk management (aa) ×  × Compliance with UK regulatory system (ff) ×  × Escalation of correspondence (ee) ×  × Note: The categories of firm in the column headings of this table are to be interpreted in accordance with the classification of firms in SYSC 24 Annex 1 4.1R. Therefore:
(1) UK core firm (column three) refers to SYSC 24 Annex 1 4.1R(2)(a); (2) Third country core firm (column four) refers to SYSC 24 Annex 1 4.1R(2)(b); and (3) Enhanced scope firm (column five) refers to SYSC 24 Annex 1 4.1R(2)(c). Amend the following as shown. 25 Senior managers and certification regime: Management responsibilities maps and handover procedures and material
25.1 Application and purpose
Main application rules

FCA 2018/XX
25.1.1
4.5.1
R This section chapter applies to: UK relevant authorised persons. (1) an SMCR dual regulated banking sector firm; (2) an enhanced scope SMCR firm; and (3) a Solvency II firm (including a large non-directive insurer) but excluding:
(a) an insurance special purpose vehicle; and (b) a firm in SYSC 23 Annex 1 3.2R (firms in run-off); except to the extent that this chapter applies a narrower scope to a particular provision. 25.1.2 4.5.3 R This section chapter is not limited to regulated activities or other specific types of activities. Territorial scope 25.1.3 4.5.2 R Subject to SYSC 25.1.4R, There there is no territorial limitation on the application of this section chapter. 25.1.4 4.6.1 R This section chapter applies to a non-UK SMCR firm:
(1) EEA relevant authorised persons; and (2) third-country relevant authorised persons; in relation to the activities of a branch maintained by them the firm in the United Kingdom. How this chapter applies to non-UK SMCR firms 25.1.5 4.6.9(2) R Unless the context requires otherwise, the following terms in SYSC 4.5.7R this chapter are modified as follows in relation to a non-UK SMCR firm:
Reference in SYSC 4.5.7R this
chapter
Modification firm treated as a reference to the branch governing body, management body, senior management and senior personnel (a) treated as a reference to the branch’s governing body, management body, senior management or senior

FCA 2018/XX personnel;
(b) the Glossary definitions of these terms are adjusted so as to refer to the branch rather than the firm as a whole group treated as including the rest of the firm PRA-prescribed senior management responsibilities treated as a reference to PRAprescribed UK branch senior management responsibilities functions allocated under SYSC 4.7.8R (Allocation of overall responsibility for a firm’s activities, business areas and management functions) treated as a reference to functions allocated under SYSC 4.8.10R (Local responsibility for a branch’s activities, business areas and management functions) Purpose 25.1.6 4.5.6(1) G (1) One purpose of the management responsibilities map is to help the firm and the FCA satisfy themselves that the firm has a clear organisational structure (as required by SYSC the regulatory system). 4.5.6(2) (2) It also helps the FCA to identify who it needs to speak to about particular issues and who is accountable if something goes wrong. 4.6.17(3) (3) The management responsibilities map helps the FCA to operate its powers and requirements for individuals. For example it helps the FCA:
(a) to identify who is accountable if something goes wrong; (b) to understand the role of the approved person (or candidate) in the branch firm and therefore to judge how to use its powers under the approved persons regime for SMCR firms, such as the power to grant or refuse approval of an SMF manager.
25.2 Management responsibilities maps: Main rules
General rule
25.2.1
4.5.4
R (1) A UK SMCR firm must, at all times, have a comprehensive and upto-date document document (the management responsibilities map) that describes its management and governance arrangements. , including:

FCA 2018/XX
(2) A non-UK SMCR firm must, at all times, have a comprehensive and up-to-date document (the management responsibilities map) that describes the management and governance arrangements for any branch it maintains in the United Kingdom. (3) A management responsibilities map must include:
(a)
(1) details of the reporting lines and the lines of responsibility; and (b) (2) reasonable details about:
(i)
(a) the persons who are part of those arrangements; and (ii) (b) their responsibilities. (See further requirements in SYSC 25.2.3R.) 25.2.2 4.5.5 R The firm’s management responsibilities map must show clearly how any responsibilities covered by a firm’s management responsibilities map are shared or divided between different persons. Specific requirements 25.2.3 4.5.7 R A management responsibilities map must include:
(1) (a) the names of all the firm’s:
(i) approved persons (including PRA approved persons); (ii) members of its governing body and (if different) management body who are not approved persons; (iii) senior management; (iv) senior personnel; and (b) details of the responsibilities which they hold; (2) all responsibilities described in any current statement of responsibilities; (3) details of the management and governance arrangements relating to:
(a) the FCA-prescribed senior management responsibilities; and

FCA 2018/XX
(b) the PRA-prescribed senior management responsibilities; including the identity of the persons to whom those functions are allocated; (4) the reasons why (if it has done any of these things) the firm:
(a) allocates responsibility for an FCA-prescribed senior management responsibility to more than one person jointly; or (b) divides responsibility for an FCA-prescribed senior management responsibility between different persons; (5) details about the functions allocated under SYSC 4.7.8R (Allocation of overall responsibility for a firm’s activities, business areas and management functions) SYSC 26 (Senior managers and certification regime: Overall and local responsibility), including:
(a) what those the activities, business areas and management functions allocated under that chapter are; (b) the management and governance arrangements relating to them; (c) details about whether and how they are shared or divided up; [deleted] (d) the reasons why (if it has done this) the firm allocates responsibility for any such function to more than one person jointly; and (e) the identity of the persons to whom those functions are allocated; (6) matters reserved to the governing body (including the terms of reference of its committees) and, if different, the management body; (7) details of how the firm’s management and governance arrangements fit together with:
(a) its group; and
(a) any other person in (8);
(8) details of the extent to which the firm’s management and governance arrangements are provided by, or shared with, other members of its group or others; (9) details of the reporting lines and the lines of responsibility (if any) between the firm and those who carry out functions in relation to

FCA 2018/XX them it and:
(a) other members of its group or other third parties; (b) persons acting as employees or officers of, or otherwise acting for, anyone in (a); or (c) committees or other bodies of anyone in (a); (10) reasonable information about the persons described or identified in the management responsibilities map, including:
(a) whether they are employees of the firm and, if not, by whom they are employed; (b) if they are certification employees of the firm; and (c) the responsibilities they have in relation to other group members or any other person in (8); and (11) details of how (1) to (10) fit together and fit into the firm’s management and governance arrangements as a whole. 25.2.4 4.5.8 R SYSC 4.5.7R(1) SYSC 25.2.3R(1) does not require the firm to include the names of approved persons under SUP 10A.1.16BR (Appointed representatives). [Editor’s note: This provision will be reviewed in a second Consultation Paper]
25.3 Management responsibilities maps: Exclusion of non-financial services
activities for some firms
25.3.1 R An enhanced scope SMCR firm may prepare its management responsibilities
map so that (subject to SYSC 25.3.4R) it only includes its management and governance arrangements to the extent that they cover, support or otherwise relate to its SMCR financial activities.
25.3.2 G Support functions that should be covered by a management responsibilities
map under SYSC 25.3.1R might include:
(1) human resources;
(2) the firm’s information technology; and (3) compliance and legal services.
25.3.3 G (1) A firm may have a non-financial services business in addition to
carrying on its SMCR financial activities. Its support services may support both aspects of its business and its management responsibilities map may therefore still need to cover the support

FCA 2018/XX services even though they also cover the firm’s non-financial services business. (2) Take for example human resources. If the firm’s human resources function covers the firm’s entire workforce without separating the parts that deal with the firm’s financial services and its other business, the management responsibilities map should cover the entire human resources function. (3) On the other hand, the firm may separate the part of its human resources function that deals with those working in its financial services business from the part that deals with the other part of its business. In that case the management responsibilities map may leave out the part of the human resources function that covers its non-financial services business.
25.3.4 R If a firm uses the exclusion in SYSC 25.3.1R it must include sufficient
information about the excluded management and governance arrangements to show how the included management and governance arrangements fit in with the firm’s management and governance arrangements as a whole.
25.4 Guidance about what should be in a management responsibilities map
Material applicable to all firms
25.4.1
4.5.9(1)
G The management responsibilities map should be consistent with the statements of responsibilities. 25.4.2 4.5.9(2) G The statements of responsibilities and the management responsibilities map should all be prepared in a way that makes it simple to see how the responsibilities allocated in a particular statement of responsibilities fit into the overall system of management and governance of the firm. 25.4.3 4.5.10 G The management responsibilities map should include functions that are:
(1) included in a PRA controlled function under:
(a) rules 2.3 to 2.5 in the part of the PRA Rulebook titled ‘Senior Management Functions’; (b) rules 2.5 to 2.6 in the part of the PRA Rulebook titled ‘Insurance - Senior Insurance Management Functions’; or (c) rules 2.5 to 2.6 in the part of the PRA Rulebook titled ‘Large Non-Solvency II Firms – Senior Insurance Management Functions’; (PRA rules complementing SUP 10C.9 (Minimising overlap with the

FCA 2018/XX
PRA approved persons regime)); or
(2) excluded from the other overall responsibility function under SUP 10C.7.1R(2) (Exclusion for approved person with approval to perform other designated senior management functions); or (3) excluded from the other local responsibility function under SUP 10C.8.1R (Exclusion for approved person with approval to perform other designated senior management functions). 25.4.4 4.5.11 G A firm’s management responsibilities map should demonstrate that there are no gaps in the allocation of responsibilities among its management. 25.4.5 4.5.12(2) G A firm need only include summary details of the persons in SYSC 4.5.7R(1) SYSC 25.2.3R(1). 25.4.6 4.5.12(3) G A firm’s SMF managers and members of its governing body may overlap with its senior management and senior personnel. If so, the firm does not have to give the same details twice. 25.4.7 4.5.12(4) G A firm should include details of individuals in addition to those in SYSC 4.5.7R(1) (3) and (5) SYSC 25.2.3R(1), (3) and (5) if they are needed to make the management responsibilities map clear. For example, it may be necessary to include these details if the same individual has responsibilities in a number of different areas of the firm. 25.4.8 4.5.12(5) G A firm should only include summary details about statements of responsibilities under SYSC 4.5.7R(2) SYSC 25.2.3R(2). There is no need to duplicate the statements of responsibilities. The main aim of including material about statements of responsibilities in the management responsibilities map is to show how the material:
(1)
(a) fits into the firm’s overall governance structure; and (2) (b) for each statement of responsibilities, fits with the others. 25.4.9 4.5.12(7) G A management responsibilities map should include a checklist confirming that all FCA-prescribed senior management responsibilities have been allocated or, if some have not been allocated, the reason why. 25.4.10 4.5.12(8) G If:
(1)
(a) any designated senior management function is performed by; or (2) any FCA-prescribed senior management responsibility is allocated

FCA 2018/XX
(b) to; more than one person, a firm’s management responsibilities map should give details of how the performance or discharge of the responsibilities is to be carried out by those persons. 25.4.11 4.5.12(6) G The executive executive director function, the other local responsibility function, the group entity senior manager function, the partner function and the other overall responsibility function are defined generally and generically and can be performed by several people. Therefore, there is no need to explain why several people perform one of the functions. 25.4.12 4.5.12(9) G The material in SUP 10C.11.31G and SUP 10C.11.32G (recording sharing and splitting of responsibilities in statements of responsibilities) also applies to a management responsibilities map. Branches of non-UK firms
25.4.13 G One effect of SYSC 25.1.5R is that a non-UK SMCR firm should draw up its
management responsibilities map as if the rest of the firm outside the UK branch were a separate company in its group. This means, for example, that the map should include:
(1) details of how the branch’s management and governance arrangements fit together with the wider firm; (2) details of the extent to which the branch’s management and governance arrangements are provided by, or shared with, the wider firm; and (3) details of the reporting lines and the lines of responsibility between the branch and those who carry out functions in relation to it and the wider firm and persons acting for it. Small firms 25.4.14 4.5.13(1) G (1) The FCA expects that the management responsibilities map of a small and non-complex firm is likely to be simple and short. It may be no more than a single sheet of paper. (2) See SYSC 24.3.5G for what small and non-complex mean.
25.5 Single Management responsibilities map should be a single document
25.5.1
4.5.14
R A management responsibilities map must be a single document document. 25.5.2 4.5.15(1) G (1) The requirement for a management responsibilities map to be a single document document does not mean that it has to be a single

FCA 2018/XX sheet of paper or must be capable of being reproduced as one. 4.5.15(2) (2) A management responsibilities map may be made up of a folder with several files or items in it. The folder may be electronic. 4.5.15(3) (3) However, a firm that creates a management responsibilities map in this way should ensure that its approach is compatible with it being a single document document. In particular:
(a) there should be a single item that identifies every item making up the management responsibilities map and shows where each item can be found; (b) for example, this could be a contents list of the items making up the management responsibilities map with electronic links to each of them; (c) the management responsibilities map should be complete by itself and should not refer to documents not forming part of it; (d) every item in the management responsibilities map should only contain material about the matters required by this
section chapter to be included in management responsibilities
maps;
(e) for example, if there is relevant material in the firm’s report and accounts, the folder should only contain the relevant parts or a link to those parts. 4.5.15(4) (4) The folder and its contents should be easily identifiable as the firm’s management responsibilities map 25.5.3 4.5.15(5) G Although a management responsibilities map can be large and complex, SYSC 4.5.13G SYSC 25.4.14G explains that, for small non-complex firms, it may be small and simple.
25.6 Management responsibilities maps: Material only relevant to EEA SMCR
firms
Application
25.6.1 R This section applies to an EEA SMCR firm.
Purpose
25.6.2
4.6.17(1)
G (1) The management responsibilities map is an important support to the FCA’s functions as Host State competent authority.

FCA 2018/XX
4.6.17(2)
(2) Having requirements and powers that apply directly to individuals helps to make the requirements on firms that the FCA is required or entitled to impose as Host State competent authority more effective. (3) As explained in SYSC 25.1.6G (Purpose), the management responsibilities map also helps the FCA to operate its powers and requirements for individuals. 4.6.17(4) (4) By helping the FCA to better understand how the branch is structured, the management responsibilities map also helps the FCA to carry out more effective supervision of conduct of business, money laundering and other Host State responsibilities. 25.6.3 4.6.5(2) G This section chapter is not intended to extend the application of the common platform requirements or other parts of SYSC to matters which are reserved by an EU instrument to the firm’s Home State regulator in relation to EEA relevant authorised persons SMCR firms. FCA-prescribed senior management responsibilities
25.6.4 G SYSC 25.2.3R (Specific requirements) requires a management
responsibilities map to cover the allocation of FCA-prescribed senior management responsibilities. This is not relevant to an EEA SMCR firm as FCA-prescribed senior management responsibilities do not apply to it. Responsibilities maps for EEA relevant authorised persons: leaving Leaving out information already supplied 25.6.5 4.6.20 R An EEA relevant authorised person SMCR firm may exclude from its management responsibilities map:
(1) any information contained in its requisite details; (2) any information contained in any notice of changes to its requisite details under the EEA Passport Rights Regulations; and (3) any other information that has been supplied by the firm to the FCA or the PRA (including through the firm’s Home State competent authority) if:
(a) that information was supplied to the FCA or the PRA as a Host State competent authority for credit institutions or investment firms; and (b) the Single Market Directives or any other EU legislation provides for the supply of that information to the FCA or the PRA as described in (a). 25.6.6 4.6.21 G Information contained in SYSC 4.6.20R (1) and (2) SYSC 25.6.5R(1) and (2) covers:

FCA 2018/XX
(1) details about the branch contained in the notice given by the firm’s Home State competent authority as part of the process for establishing the branch in the United Kingdom; and (2) any updates to that information under the EEA Passport Rights Regulations. 25.6.7 4.6.22 G The management responsibilities map of an EEA relevant authorised person SMCR firm may therefore consist of information:
(1) that has changed since its requisite details were supplied or were last changed; or (2) that is not covered in the firm’s Home State competent authority’s passport notification. 25.6.8 4.6.23 G The FCA expects that an EEA relevant authorised person SMCR firm that excludes information from its management responsibilities map under SYSC 25.6.5R will identify in its management responsibilities map the documents supplied to the FCA or the PRA where the omitted information can be found. 25.6.9 4.6.24 G In practice an EEA relevant authorised person SMCR firm may find it easier to prepare its management responsibilities map without omitting any information under SYSC 25.6.5R so that all the information referred to in SYSC 4.6.15R to SYSC 4.6.19R SYSC 25.2 (Management responsibilities maps: Main rules) can be found in a single integrated document document. 25.6.10 4.6.26 G SYSC 4.6.27G and SYSC 4.6.28G do SYSC 25.3 (Guidance about what should be in a management responsibilities map) does not take into account the right of a firm to omit information under SYSC 25.6.5R. They assume It assumes that the firm will prepare a single document document under SYSC 25.6.9G. However SYSC 4.6.27G and SYSC 4.6.28G are 25.3 is not intended to take away the right to omit information under SYSC 25.6.5R.
25.7 Guidance about SYSC 25 Annex 1G
25.7.1 G This section gives guidance about SYSC 25 Annex 1G (Examples of the
business activities and functions of an SMCR firm).
Purpose of SYSC 25 Annex 1G (The main business activities and functions of a relevant authorised person) 25.7.2 4.5.16(2) G (1) A firm may use it SYSC 25 Annex 1G as a checklist prompt to see whether its management responsibilities map covers all its business activities. 4.5.16(3) (2) A firm may wish to prepare its management responsibilities map using the same split of activities, where this is appropriate.

FCA 2018/XX
25.7.3
4.5.16(5)
G As mentioned in SYSC 26.11.2G, a firm may also use it SYSC 25 Annex 1G as a checklist prompt when allocating responsibilities under SYSC 4.7.8R (Allocation of overall responsibility for a firm’s activities, business areas and management functions) 26 (Senior managers and certification regime:
Overall and local responsibility).
25.7.4
4.5.16(4)
G If a firm uses SYSC 25 Annex 1G to help it prepare its management responsibilities map or when allocating responsibilities under SYSC 26 (Senior managers and certification regime: Overall and local responsibility), it should bear in mind that it is not comprehensive and that there may be other business activities and functions that are relevant to that firm (see SYSC 25.7.8G). 25.7.5 4.5.17 G There is no direct link between SYSC 25 Annex 1G and the senior management managers regime for relevant authorised persons SMCR firms. Contents of SYSC 25 Annex 1G (The main business activities and functions of a relevant authorised person) 25.7.6 4.5.18 G SYSC 25 Annex 1G sets out examples of the main business activities and functions that the FCA thinks are likely to could be relevant to most large or complex firms, although the FCA does not require firms to organise themselves in this way. 25.7.7 4.5.19 G Most or all of these activities and functions will normally apply to a complex firm. Many of them may not apply to a non-complex firm. 25.7.8 4.5.20 G (1) SYSC 25 Annex 1G is not comprehensive. While it is intended to cover most front-line business activities of a relevant authorised person an SMCR firm, it does not cover all internal oversight and monitoring functions. (2) For example, it does not cover compliance or internal audit or the firm’s governing body or its committees.
25.8 Management responsibilities maps: Records
25.8.1
4.5.21
G A firm should consider past versions of its management responsibilities map as an important part of its records and as an important resource for the FCA in supervising the firm. 25.8.2 4.5.22 G Past versions of a firm’s management responsibilities map form part of its records under SYSC 9.1 (General rules on record-keeping) the regulatory system.
25.9 Handover procedures and material

FCA 2018/XX
Application
25.9.1
4.9.1(1)
R This section applies to a firm that meets the following conditions:
(1) it falls within SYSC 25.1.1R (Application and purpose); and (2) it falls within one of the following categories:
(a) it is a UK relevant authorised persons SMCR firm; and or (b) it is a third-country relevant authorised persons SMCR dual regulated banking sector firm. 25.9.2 4.9.1(2) R For third-country relevant authorised persons non-UK SMCR firms, references in this section to an SMF manager are references to the SMF manager when acting as an SMF manager for the firm’s branch in the United Kingdom.
25.9.3 R This section does not apply to a full-scope UK AIFM in relation to its
managing an AIF.
Rules about handover material
25.9.4
4.9.4
R A firm must take all reasonable steps to ensure that:
(1) a person who is becoming an SMF manager; (2) an SMF manager:
(a) taking on a new job or new responsibilities; or (b) whose responsibilities or job are being changed; and (3) anyone who has management or supervisory responsibilities for the SMF manager in (1) or (2); has, when the SMF manager starts to perform his their new or revised responsibilities or job, all information and material that a person in (1) to (3) could reasonably expect to have to perform those responsibilities or that job effectively and in accordance with the requirements of the regulatory system. 25.9.5 4.9.5 R (1) A firm must have a policy about how it complies with SYSC 25.9.4R, including the systems and controls it uses. (2) A firm must make and maintain adequate records of the steps taken to comply with SYSC 25.9.4R.

FCA 2018/XX
25.9.6
4.9.6
G The information and material in SYSC 25.9.4R that should be made available includes details:
(1) about unresolved or possible breaches of the requirements of the regulatory system; and (2) of any unresolved concerns expressed by the FCA, the PRA or another regulatory body. 25.9.7 4.9.7 G (1) The main purpose of SYSC 25.9.4R is to help the SMF manager with his their new or revised responsibilities or job and to help the managers of SMF managers. (2) It should be a practical and helpful document and not just a record. (3) The material should include an assessment of what issues should be prioritised. (4) It should include judgement and opinion, not just facts and figures. Handover arrangements and certificates 25.9.8 4.9.8 G (1) Where the responsibilities or job in SYSC 25.9.4R are being taken over from another person, the firm should have arrangements for an orderly transition. (2) As part of these arrangements, the firm should take reasonable steps to ensure that the predecessor contributes to the information and material in SYSC 25.9.4R all that would be reasonable to expect the predecessor to know and consider relevant, including the predecessor’s opinions. (3) One way of doing this could be for the predecessor to prepare a handover certificate. (4) However, the FCA accepts that there will be cases in which it will be impractical to ask the predecessor to prepare a handover certificate. Application of this section to other parts of a firm’s management 25.9.9 4.9.9 G A firm should consider whether to apply the procedures in this section to other parts of its management. 25 Annex 1G 4 Annex 1G The main Examples of the business activities and functions of a relevant authorised person an SMCR firm

FCA 2018/XX
Business areas and management functions
Explanation
(1) Payment services This means:
(1) payment services;
(2) issuing and administering other means of payment (for example, cheques and bankers' drafts); (3) issuing electronic money; and (4) current accounts. (2) Settlement This means clearing and settlement of any transactions described in rows (3) and (6) to (9) of this annex, in relation to the assets covered by (9). It also includes clearing and settlement of any transactions described in row (10). (3) Investment management This has the same meaning as managing investments with the following adjustments:
(a) it covers all types of assets; and
(b) the exclusions in the Regulated Activities Order do not apply. It also covers fund management. (4) Financial or investment advice This includes advising on investments. (5) Mortgage advice This has the same meaning as advising on regulated mortgage contracts but is expanded to cover land anywhere in the world and to cover security of any kind over land. (6) Corporate investments This means acquiring, holding, managing and disposing a firm’s investments made for its own account. (7) Wholesale sales This means the selling of any investment to a person other than a retail customer. It does not include the activities in (1). (8) Retail sales This means the selling of any investment to a retail customer.

FCA 2018/XX
It includes savings accounts. It does not include the activities in (1). (9) Trading for clients This means dealing in investments as agent and execution of orders on behalf of clients but the list of products includes money market instruments and foreign exchange. (10) Market making This has the same meaning as it does in MIFID (see the definition of market maker in article 4.1(8)(7)). (11) Investment research (12) Origination/syndication and underwriting Origination and syndication include:
(1) entering into or acquiring (directly or indirectly) any commitment or investment with a view to transferring some or all of it to others, or with a view to others investing in the same transaction; (2) sub-participation; and (3) any transaction described in the Glossary definition of originator. Underwriting includes underwriting that is not on a firm commitment basis. A commitment or investment includes an economic interest in some or all of it. This activity also includes the provision of services relating to such transactions. (13) Retail lending decisions Deciding whether, and on what terms, to lend to retail customers. Lending includes granting credit, leasing and hire (including finance leasing). (14) Wholesale lending decisions Deciding whether, and on what terms, to lend to persons who are not retail customers. Lending includes granting credit, leasing and hire (including finance leasing). (15) Design and manufacturing of products intended for wholesale customers Wholesale customers mean persons who are not retail customers (16) Design and manufacture of products

FCA 2018/XX intended for retail customers (17) Production and distribution of marketing materials and communications This includes financial promotions (18) Customer service This means dealing with clients after the point of sale, including queries and fulfilment of client requests (19) Customer complaints handling This includes the firm’s compliance with DISP. It also includes:
(1) any similar procedures relating to activities that do not come under the jurisdiction of the Financial Ombudsman Service; (2) activities that take place outside the UK; and (3) activities that are not subject to any ombudsman service. (20) Collection and recovering amounts owed to a firm by its customers Dealing with customers in arrears ‘Customer’ means any person falling into any of the definitions of client in the Glossary so far as they apply to the FCA’s Handbook. The definition is extended to cover all services provided by the firm and not just those that are provided in the course of carrying on a regulated activity or an ancillary service. (21) Middle office This means risk management and controls in relation to, and accounting for, transactions in securities or derivatives (22) The firm's information technology Issuing commitments This means the activity described in SYSC 27.7.6R(1)(i) (examples of what the significant management FCA-specified significant-harm function can cover). (23) Business continuity planning Processing This means the functions described in SYSC 4.1.6R and SYSC 4.1.7R This means the activity described in SYSC 27.7.6R(1)(j) (examples of what the significant management FCA-specified significant-harm function can cover). (24) Human resources This includes recruitment, training and competence and performance monitoring (25) Incentive schemes for the firm’s staff This is not limited to schemes based on sales.

FCA 2018/XX
(26) Providing information in relation to a specified benchmark (27) Administering a specified benchmark (29) Administration of insurance This means the activity described in SYSC 27.7.6R(1)(k) (examples of what the significant management FCA-specified significant-harm function can cover). Note (1): The purpose of this annex is explained in SYSC 4.5 (Management responsibilities maps for UK relevant authorised persons) SYSC 25.7 (Guidance about SYSC 25 Annex 1G) and SYSC 26.11.2G. This annex is also referred to in SYSC 4.6 (Management responsibilities maps for non-UK relevant authorised persons) and SYSC 4.8 (Senior management responsibilities for third-country relevant authorised persons: allocation of responsibilities) (see SYSC 4.6.14 and SYSC 4.8.35). Note (2): A firm does not have to use the split of example activities in this annex for the purposes in Note (1). If a firm does decide to use it, it may the firm should adapt it to suit its the firm’s management arrangements better. For example, a firm may find the split of activities into retail and wholesale activities unsuitable. If so, the firm might:
(a) treat retail and wholesale activities together; or (b) use its own definition of retail and wholesale activities. 26 Senior managers and certification regime: Overall and local responsibility
26.1 Application
Main application rules
26.1.1 R This chapter applies to:
(1) an SMCR dual regulated banking sector firm; (2) an enhanced scope SMCR firm; and (3) a Solvency II firm (including a large non-directive insurer) but excluding:
(a) an insurance special purpose vehicle; and (b) a firm in SYSC 23 Annex 1 3.2R (firms in run-off); except to the extent that this chapter applies a narrower scope to a particular provision.
26.1.2 R SYSC 4.8 This chapter is not limited to regulated activities or other specific

FCA 2018/XX
4.8.4 types of activities.
Exclusions
26.1.3 R This chapter does not apply to an EEA SMCR firm.
Territorial scope
26.1.4
4.8.3
R There is no territorial limitation on the application of SYSC 4.8 this chapter, save as set out in SYSC 26.1.5R. 26.1.5 4.8.2 R This section relates When this chapter applies to the activities of a thirdcountry relevant authorised person’s non-UK SMCR firm, it applies in relation to the firm’s branch in the United Kingdom.
26.1.6 R Unless the context requires otherwise, the terms in the first column of the
table in SYSC 26.1.7R are modified as described in the second column of
that table in relation to a non-UK SMCR firm.
26.1.7 R Table: Application of this chapter to a third-country SMCR firm
Reference in this chapter Modification firm treated as a reference to the branch governing body (a) treated as a reference to the branch’s governing body; (b) the Glossary definition of this term is adjusted so as to refer to the branch rather than the firm as a whole group treated as including the rest of the firm chief executive branch manager or the person performing the head of third country branch function or the PRA’s Head of Overseas Branch designated senior management function
26.2 Purpose
26.2.1
4.8.5
G The purpose of this section chapter is to ensure, together with the equivalent PRA requirements and the requirements about FCA-prescribed senior management responsibilities in SYSC 24 (Senior managers and certification regime: Allocation of prescribed responsibilities), that:
(1) an SMF manager is responsible and accountable for every area of a

FCA 2018/XX branch’s firm’s activities;
(2) the allocation of responsibilities is done systematically and explicitly; and (3) the process of allocation of responsibilities under this chapter covers every part of a firm’s activities, business areas and management functions (subject to the exclusions in SYSC 26.4 (Exclusions) without any gaps in what is allocated in this process.
26.2.2 G The purpose of this chapter is not primarily to ensure that formal
responsibility for everything a firm does is allocated amongst its senior management. Even without the requirements of this chapter, responsibilities that have not been allocated explicitly would fall to the chief executive by default. However, one of the purposes of this chapter is to avoid responsibilities being allocated by implication or by default.
26.2.3 G (1) The allocation of responsibilities under this chapter does not replace
the responsibilities of the chief executive.
(2) If a firm allocates responsibilities under this chapter to an SMF manager other than the chief executive, the chief executive will be responsible for managing that person’s performance of those responsibilities in the same way that the chief executive manages that person’s other responsibilities. (3) A firm may allocate responsibilities under this chapter to the chief executive.
26.3 Main rules
26.3.1
4.7.8(1)
R A UK SMCR firm must ensure that, at all times, one or more of its SMF managers have overall responsibility for each of the activities, business areas and management functions of the firm. 26.3.2 4.8.10(1) R (1) A non-UK SMCR firm must ensure that, at all times, one or more of its SMF managers has overall responsibility (subject to the branch’s governing body) for each of the activities, business areas and management functions of the branch that are under the management of the branch’s governing body. 4.8.10(2) (2) A non-UK SMCR firm must ensure that, at all times, one or more of its SMF managers has responsibility for each of the activities, business areas and management functions of the branch not covered by (1). 4.8.10(3) (3) An SMF manager in (2) must be directly involved in the management of the activity, business area or management function for which they have responsibility under (2).

FCA 2018/XX
26.3.3
4.8.10(4)
R An SMF manager who has responsibility for an activity, business area or management function under (1) or (2) this section:
(1) (in the case of a UK SMCR firm) has “overall responsibility”; (2) (in the case of a non-UK SMCR firm) has “local responsibility”; for that activity, business area or management function. 26.3.4 4.7.8(3) R A firm must make the allocations of responsibilities in this rule chapter in such a way that it is clear who has which of those responsibilities.
26.4 Exclusions
Exclusions where other requirements apply
26.4.1 R SYSC 26.3 (Main rules) does not require a firm to ensure that SMF managers
have local or overall responsibility for any activity, business area or management function that is included in an FCA-prescribed senior management responsibility. 26.4.2 4.7.8(2) R This rule SYSC 26.3 (Main rules) does not require a firm PRA-authorised person to ensure that SMF managers have local or overall responsibility for any activity, business area or management function that is:
(a) included in an FCA-prescribed senior management responsibility; or (1) (b) included in an a PRA-prescribed senior management responsibility; or (2) (c) managed (as part of the PRA-designated senior management function concerned) by any of the firm’s SMF managers approved to perform any of the following PRA-designated senior management functions for the firm:
(a)
(i) the Chief Finance function;
(b)
(ii) the Chief Risk function;
(c)
(iii) the Head of Internal Audit function; or (d) (iv) the Head of Key Business Area function; or

FCA 2018/XX
(e) the Chief Operations function; or
(f)
(v) the Group Entity Senior Manager function or the Group Entity Senior Insurance Manager function. Exclusion of the governing body and non-executive directors 26.4.3 4.8.10(6) R This rule SYSC 26.3 (Main rules) does not require a firm to allocate overall or local responsibility for the running of the branch’s firm’s governing body. 26.4.4 4.8.13(2) G This SYSC 26.4.3R means that a person does not have overall or local responsibility for a function under SYSC 4.8.10R this chapter just by being a member of a branch’s firm’s governing body or equivalent. 26.4.5 4.7.18 G (1) A person who just provides oversight of a function does not have overall or local responsibility for that function under SYSC 4.7.8R (Allocation of overall responsibility for a firm’s activities, business areas and management functions) this chapter. (2) Paragraph (1) and SYSC 4.7.17G SYSC 26.4.4G mean that a nonexecutive director acting as such does not have overall or local responsibility for a function under SYSC 4.7.8R SYSC 26.3 or perform the other overall responsibility function or the other local responsibility function. (3) Paragraph (1) and SYSC 4.7.17G SYSC 26.4.4G mean that a nonexecutive director:
(a) providing oversight of a function; or (b) being responsible for the independence of a function; does not have overall or local responsibility for that function under SYSC 4.7.8R this chapter or perform the other overall responsibility function or the other local responsibility function. Exclusion of non-financial services activities
26.4.6 R SYSC 26.3 (Main rules) only requires an enhanced scope SMCR firm to
allocate responsibility for activities, business areas and management functions to the extent that they support, form part of or otherwise relate to its SMCR financial activities.
26.4.7 G SYSC 25.3.2G and SYSC 25.3.3G (Management responsibilities maps:
Exclusion of non-financial services activities for some firms) are relevant to when an enhanced scope SMCR firm may exclude support services from the allocation of responsibilities under this chapter. Exclusion where the 12-week rule applies

FCA 2018/XX
26.4.8 R (1) This rule applies where:
(a) a firm appoints someone to perform a function in order to provide cover as described in SUP 10C.3.13R(1) (The 12- week rule) or the PRA equivalent; and (b) the firm has allocated any responsibilities (the “Responsibilities”) under SYSC 26.3 (Main rules) to the SMF manager (the absent manager) who is absent as described in SUP 10C.3.13R(2) or the PRA equivalent. (2) While the disapplication of the designated senior management function provided for in SUP 10C.3.13R(1) or the PRA equivalent is still in force the firm may allocate the Responsibilities to an employee who is not an SMF manager. (3) For the purposes of this rule, the PRA equivalent of:
(a) SUP 10C.3.13R is:
(i) rule 2.3 in the “Senior Management Functions” part of the PRA Rulebook; (ii) rule 2.4 in the “Insurance - Senior Insurance Management Functions” part of the PRA Rulebook; and (iii) rule 2.4 in the “Large Non-Solvency II Firms – Senior Insurance Management Functions” part of the PRA Rulebook. (b) SUP 10C.3.13R(1) and (2) are:
(i) rules 2.3(1) and (2) in the “Senior Management Functions” part of the PRA Rulebook; (ii) rules 2.4(1) and (2) in the “Insurance - Senior Insurance Management Functions” part of the PRA Rulebook; and (iii) rules 2.4(1) and (2) in the “Large Non-Solvency II Firms – Senior Insurance Management Functions”
part of the PRA Rulebook.
26.4.9 G A firm need not allocate the Responsibilities referred to in SYSC
26.4.8R(1)(b) to the person who is providing cover for the absent SMF manager.
26.4.10 G SYSC 26.4.8R and SUP 10C.3.13R apply to a person performing the other
overall responsibility function or the other local responsibility function as well as to a person performing one of the other designated senior

FCA 2018/XX management functions.
Exclusion for AIFMD
26.4.11 R A full-scope UK AIFM may treat managing an AIF as not being part of its
SMCR financial activities for the purposes of this chapter.
26.5 Guidance on territorial scope
Allocation of responsibilities and territorial scope
26.5.1 G SYSC 26.1.4R (territorial scope) means that a firm should allocate overall
responsibilities under this chapter so that they cover activities, transactions, business areas and functions that are located or take place wholly or partly outside, as well as ones in, the United Kingdom. Allocation of responsibility for transactions in branches
26.5.2 G There is an exception to SYSC 26.5.1G for a non-UK SMCR firm. This is
that SYSC 26.1.5R limits this chapter to the activities of its UK branch. 26.5.3 4.8.30 G (1) It is common for a branch to carry out only part of a transaction. For instance, a transaction may be booked in a branch but negotiated and arranged elsewhere or vice versa. (2) When allocating responsibility to an SMF manager for activities in relation to transactions under SYSC 4.8.10R SYSC 26.3 (Main rules), a firm should not exclude a transaction which is arranged, booked or negotiated in the branch merely because other elements of the transaction occur outside the United Kingdom.
26.6 Meaning of local and overall responsibility: General
UK firms
26.6.1 G The meaning in practice of overall responsibility for a function depends on
whether that function is under the management of the firm’s governing body or not.
26.6.2 G (1) Certain EU legislation requires the governing body of a firm to have
ultimate responsibility for, and the prime and leading role in, managing the firm. (2) In particular this is the case under:
(a) article 88 of the CRD (Governance arrangements); (b) article 9 of MiFID (management body); and

FCA 2018/XX
(c) article 40 of the Solvency II Directive (Responsibility of the administrative, management or supervisory body). (3) This means that the governing body of a UK SMCR firm subject to these requirements will manage the conduct of the whole of the business of the firm. In turn that means that the parts of this chapter dealing with a function that is not managed by the firm’s governing body will not be relevant to it.
26.6.3 G The FCA recognises that for some UK SMCR firms not subject to the
requirements in SYSC 26.6.2G, some activities, business areas and functions of a firm may not be under the management of its governing body. This may be the case where, for example:
(1) the firm does not have a governing body; or (2) the firm’s shareholders play a key role in managing it through, for example, a group management committee. Branches of non-UK firms 26.6.4 4.8.11(2) G (1) SYSC 4.8.10R(1) SYSC 26.3.2R(1) refers to the activities, business areas and management functions of the branch that are under the management of the branch’s governing body. However, the FCA recognises that for some branches, some activities, business areas and functions of the branches branches may not be under the management of the branch’s governing body. This may be the case where the branch does not have its own governing body or where it is organised in such a way that certain functions are under the management of a person or body outside the branch’s management structure. In those circumstances, it would not be appropriate to require the firm to allocate overall responsibility for that matter to a person who is part of the management structure of the branch. 4.8.11(3) (2) The requirements to allocate responsibility for activities, business areas and functions of a branch under SYSC 4.8.10R(1) and (2) SYSC 26.3.2R(1) and (2) respectively are intended to allow for the difference described in (2) (1). In particular:
(a) SYSC 4.8.10R(1) SYSC 26.3.2R(1) is intended to cater for the situation where a particular activity, business area or function of the branch is under the management of the branch’s governing body. In that situation, the firm should allocate overall responsibility for that matter under SYSC 4.8.10R(1) SYSC 26.3.2R(1); and (b) SYSC 4.8.10R(2) SYSC 26.3.2R(2) is intended to cater for the situation where a particular activity, business area or function of the branch is not under the management of branch’s governing body. In that situation, the firm should allocate responsibility for that matter under SYSC 4.8.10R(2) SYSC

FCA 2018/XX
26.3.2R(2).
Further guidance
26.6.5 G SYSC 26.7 gives guidance on the effect of SYSC 26.3 (Main rules) when a
function is under the governing body’s management. SYSC 26.8 gives guidance on the effect of SYSC 26.3 when the function is not. Day-to-day or ultimate control 26.6.6 4.8.12 G SYSC 4.8.10R(4) states that a person who has responsibility for an activity, business area or management function under SYSC 4.8.10R(1) or (2) will have local responsibility for that matter. Having overall or local responsibility under this chapter for a matter does not necessarily mean:
(1) having ultimate authority over it; or (2) having day-to-day management control of that function. 26.6.7 4.7.12 G Having overall responsibility for a matter does not mean having ultimate authority over it. The In particular, the ultimate decision-making body of a firm many UK SMCR firms is its their governing body, acting collectively.
26.7 Meaning of local and overall responsibility: Reporting to the governing body
26.7.1 G This section gives guidance on what overall and local responsibility for a
function means when the governing body manages the function in question under SYSC 26.3 (Main rules). 26.7.2 4.7.11 G When SYSC 4.7 this chapter refers to a person having overall or local responsibility for a function as described in SYSC 26.7.1G, it means a person who has:
(1) ultimate responsibility (under the governing body and the chief executive) for managing or supervising that function; and (2) primary and direct responsibility for:
(a) briefing and reporting to the governing body about that function; and (b) putting matters for decision about that function to the governing body. 26.7.3 4.8.17 G In general, the FCA expects that a person to whom overall responsibility for a function is allocated under SYSC 4.8.10R(1) as described in SYSC 26.7.1G will be the most senior employee or officer responsible for managing or supervising that function under the management of the branch’s governing body.

FCA 2018/XX
26.7.4
4.7.13
G (1) A person with overall or local responsibility for a matter will either be a member of the governing body or will report directly to the governing body for that matter. (2) For example, a firm appoints A to be head of sales. A is not on the governing body. A reports to an executive director (B) and B reports to the governing body about the sales function. In this example B, rather than A, has overall responsibility for sales. 26.7.5 4.7.14 G (1) A person who reports to another, or is subject to oversight by another, may still have overall or local responsibility for a function. (2) For example, a head of compliance may report direct to the governing body but be subject to performance appraisal by the chief executive chief executive. In this example, the head of compliance will still have overall responsibility for compliance. (3) If a person (A):
(a) reports directly to the firm’s governing body about a particular matter; but (b) is not a member of the governing body; and (c) reports to a member of the governing body (B) about that matter, who also reports to the governing body about that matter; B has overall or local responsibility for that matter. (4) If:
(a) a person (A) reports directly to the firm’s governing body about a particular matter; (b) A also reports to another person (B) about that matter; (c) neither A nor B is a member of the governing body; and (d) B also reports directly to the firm’s governing body about that matter; B has overall responsibility for that matter. (5) A member of the governing body who reports to the chief executive may still have overall or local responsibility for a function. (6) If:
(a) a person (A) reports directly to the firm’s governing body about a particular matter; and

FCA 2018/XX
(b) A’s function is subject to oversight by a non-executive director (B) or by a committee of the firm’s governing body chaired by B; A (not B) has overall or local responsibility for that matter. 26.7.6 4.8.18 G A person may have overall local responsibility for a function under SYSC 4.8.10R(1) for a branch of a non-UK SMCR firm even though that person also reports to a person outside the branch.
26.8 Meaning of local and overall responsibility: Not reporting to the governing
body
Scope of this section
26.8.1
4.8.20(1)
G SYSC 4.8.10R(2) This section relates to the allocation of overall or local responsibility for any activities, business areas and functions of the branch firm which are not under the management of the branch’s its governing body (see SYSC 26.3 (Main rules)). Branches: Responsibility held outside the management structure of branch 26.8.2 4.8.20(3) G A person having local responsibility for a function under SYSC 4.8.10R(2) for a branch does not need to be part of the management structure of the branch in order to have local responsibility for the function. Branches: Setting overall strategy for a branch 26.8.3 4.8.27 G (1) Generally, where a non-UK SMCR firm allocates responsibility under SYSC 4.8.10R as described in SYSC 26.8.1G to one of the firm’s SMF managers who is not based in the branch the FCA would expect:
(a) that the responsibility would not be allocated to a manager whose responsibilities for the branch are limited to setting overall strategy for the branch; and (b) that, instead, the firm would allocate it to a manager who is the most senior person responsible for implementing the strategy for the branch. (2) See SUP 10C.1.5AG for more about how the difference between strategic and implementing responsibilities affects the FCA senior management managers regime for approved persons in third-country relevant authorised persons non-UK SMCR firms. 26.8.4 4.8.26 G (1) In some cases, a person who has local responsibility for a particular function may be very senior within the firm as a whole.

FCA 2018/XX
(2) For instance, in some branches, an individual with local responsibility for a function may also be the head of the firm’s Europe and Middle East division for a business line and may be more senior within the firm as a whole than the person performing the PRA’s Head of Overseas Branch designated senior management function. UK firms
26.8.5 G Having overall responsibility for a function as described in SYSC 26.8.1G
means being the most senior employee or officer responsible for managing or supervising that function.
26.9 Who functions should be allocated to
Seniority
26.9.1
4.7.21(2)
G However, the The FCA expects that anyone who has overall or local responsibility for a matter:
(1)
(a) will be sufficiently senior and credible; and (2) (b) will have sufficient resources and authority; to be able to exercise his their management and oversight responsibilities effectively. 26.9.2 4.8.22 G (1) The FCA would not consider it unusual if a person who has overall or local responsibility for a particular function was not a member of the branch’s firm’s governing body or equivalent. (2) For example, in some branches firms, the head of compliance may report directly to the branch’s firm’s governing body even though the head of compliance is not a member of the governing body.
26.9.3 G Other parts of this chapter dealing with seniority are:
(1) SYSC 26.7.3G (seniority of someone with overall responsibility for a function under the management of a firm’s governing body); (2) SYSC 26.8.3G (seniority of someone from elsewhere in the firm having local responsibility in a branch); and (3) SYSC 26.8.5G (seniority of someone within a UK SMCR firm with overall responsibility for a function not under the management of a firm’s governing body).

FCA 2018/XX
Not giving too much responsibility to one individual 26.9.4 4.7.23(1) G (1) It will be common for a small non-complex firm to divide overall or local responsibility for its activities under the management of its governing body between members of its governing body and not to assign overall or local responsibility for any activity to someone who is not a member. 4.7.23(2) (2) However, when deciding how to divide up overall or local responsibility for its activities, a firm should avoid assigning such a wide range of responsibilities to a particular person so that the person is not able to carry out those responsibilities effectively. 4.7.23(3) (3) Therefore, in a large or complex firm, the FCA expects overall or local responsibility for some functions to be assigned to persons in the layer of management below the governing body. Anyone in that layer having overall or local responsibility for an activity will be performing a designated senior management function. 26.9.5 4.8.28(5) G Paragraph (2) SYSC 26.9.4G(2) also applies to allocating responsibility for functions that are not under the management of the firm’s or branch’s governing body. Dividing and sharing management functions between different people
26.9.6 G The following provisions of SYSC 24.3 (Who prescribed responsibilities
should be allocated to) also apply to allocations under this chapter so far as those provisions deal sharing responsibilities:
(1) SYSC 24.3.8G (responsibilities should generally not be shared); (2) SYSC 24.3.9G (when responsibilities may be shared); and (3) SYSC 24.3.11G (statements of responsibilities);
26.9.7 G (1) The material in SYSC 24.3 (Who prescribed responsibilities should
be allocated to) about splitting of responsibilities is not directly relevant to this chapter. This is because SYSC 24 deals with functions that have been defined in the Handbook whereas this chapter does not define the areas into which a firm’s activities should be divided when allocating responsibilities to its SMF managers. (2) However SYSC 24.3.10G (responsibilities should be grouped together appropriately) is also relevant for deciding whether responsibility for a particular set of matters should be allocated to one SMF manager or allocated between several.
26.10 Group management arrangements and outsourcing

FCA 2018/XX
26.10.1
4.7.31
G (1) SYSC 4.7.8R (Allocation of overall responsibility for a firm’s activities, business areas and management functions) This chapter requires overall or local responsibility for various aspects of a firm’s affairs to be allocated to an SMF manager. (2) This requirement does not prevent a firm from relying on an employee of a company in the same group to perform the function. (3) A firm has two main choices about how to fit such arrangements into the senior management managers regime for relevant authorised persons SMCR firms. (a) The group employee is appointed by the firm’s firm (usually by its governing body if it has one) to perform the function. This means that the firm will have entered into an arrangement with that person. As explained in SUP 10C.3.9G, an arrangement with the firm is one of the factors that makes the senior management managers regime for relevant authorised persons SMCR firms apply. The result is that the group official will be performing a controlled function and will need to be approved as an SMF manager. (b) The firm appoints someone (A) to oversee what the group employee does (so far as it concerns the firm) and to take overall allocates responsibility for the function to A, leaving day-to-day activities to the group employee. A will need to be approved as an SMF manager. 26.10.2 4.7.34 G SYSC 26.10.1G and SYSC 4.7.33G also apply applies to a firm that outsources functions to a third party and is relying on an individual from the outsourced services provider to carry out the functions in those paragraphs. 26.10.3 4.7.32 G (1) SYSC 4.7.8R (Allocation of overall responsibility for a firm’s activities, business areas and management functions) This chapter does not cover responsibility for an aspect of a firm’s PRAauthorised person’s affairs managed by an individual approved to perform the Group Entity Senior Manager or the Group Entity Senior Insurance Manager PRA-designated senior management function (see SYSC 26.4.1R (Exclusions where other requirements apply). (2) Where a responsibility is held by someone approved to perform the Group Entity Senior Manager one of those PRA-designated senior management function functions for the firm PRA-authorised person, there is no need to appoint that person under this chapter and apply the arrangements in SYSC 26.10.1G. (3) (a) The statement of responsibilities for the individual performing the Group Entity Senior Manager PRAdesignated senior management function; and

FCA 2018/XX
(b) the firm’s management responsibilities map; should clearly show what responsibilities are held by that individual.
26.11 Link between this chapter and other parts of the senior managers regime
Link between the designated senior management regime functions and this section
chapter
26.11.1
4.7.36(1)
G (1) Having overall or local responsibility for an activity under SYSC 4.7.8R this chapter requires approval as an SMF manager. This is because a person who has overall or local responsibility for an activity will be:
(a) performing the other overall responsibility function or the other local responsibility function; or (b) approved to perform another designated senior management function. 4.7.36(2) (2) The other overall responsibility function applies because this is the effect of SUP 10C.7.1R (definition of other overall responsibility function). 4.7.36(3) (3) SUP 10C.7.1R says that the other overall responsibility function does not apply to a person who is approved to perform another designated senior management function. 4.8.33(2) (4) The other local responsibility function applies because this is the effect of SUP 10C.8.1R (Definition of the other local responsibility function (SMF22)).
4.8.34 (5) SUP 10C.8.1R(2) says that the other local responsibility function
does not apply to a person who is approved to perform another designated senior management function in relation to the branch. Link between SYSC 25 Annex 1G and this section chapter 26.11.2 4.7.37 G (1) The purpose of SYSC 25 Annex 1G (The main Examples of the business activities and functions of a relevant authorised person an SMCR firm) is to help a firm to prepare its management responsibilities map (see SYSC 25.7.2G). (2) There is no direct link between SYSC 25 Annex 1G and this section
chapter.
(3) However, a firm may find SYSC 25 Annex 1G useful as a checklist prompt to help it make sure that it has not failed to allocate overall or local responsibility under SYSC 4.7.8R this chapter for a particular

FCA 2018/XX activity of the firm.
(4) If a firm uses SYSC 25 Annex 1G to help it check whether it has allocated as a prompt when it allocates overall or local responsibility as described in (3), it should bear in mind that it is not comprehensive (see SYSC 25.7.8G). 26.11.3 4.7.38 G SYSC 4.7.26G (a firm should normally allocate responsibility for particular areas to a single SMF manager) does not mean that the The FCA expects does not require there to be a separate person with overall responsibility for each individual business area in SYSC 25 Annex 1G (The main Examples of the business activities and functions of a relevant authorised person an SMCR firm). 27 Senior managers and certification regime: Certification regime
27.1 Application and purpose
Application
27.1.1
5.2.1
R This section chapter applies to a relevant authorised person an SMCR firm. 27.1.2 5.2.2 G This section chapter is also relevant to employees of relevant authorised persons SMCR firms performing functions specified as FCA-specified significant-harm functions. Exclusions
27.1.3 R This chapter does not apply to a firm that meets the following conditions:.
(1) it is an internally managed AIF;
(2) it is a body corporate; and
(3) it is not a collective investment scheme.
Purpose
27.1.4
5.2.3
G (1) This section chapter is about the FCA’s certification regime. (2) Under this regime, a firm should ensure that its employees only perform an FCA-specified significant-harm function if they have a certificate issued by that firm to perform that function. (3) The purpose of this section chapter is to specify ‘FCA-specified significant-harm functions’ and to give guidance on the FCA’s certification regime.

FCA 2018/XX
27.2 Requirements of the certification regime
General
27.2.1 G Most of the requirements of the certification regime are in the Act. This
section summarises and gives guidance on them.
27.2.2
5.2.5
G (1) [The requirement in SYSC 5.2.4G comes into force on 7 March 2017.] (2) [SYSC TP 5 explains how the certification regime applies before then.] [Editor’s note: This provision will be reviewed in a second Consultation Paper] General Basic requirements 27.2.3 5.2.4 G Under section 63E(1) of the Act, a firm must take reasonable care to ensure that no employee of the firm performs an FCA-specified significant-harm function under an arrangement entered into by the firm in relation to the carrying on by that firm of a regulated activity, unless the employee has a valid certificate issued by that firm to perform the function to which certificate relates. Fitness to act 27.2.4 5.2.6 G Under section 63F of the Act, a firm may issue a certificate to a person only if the firm is satisfied that the person is a fit and proper person to perform the FCA-specified significant-harm function to which the certificate relates. 27.2.5 5.2.7 G Under section 63F of the Act, in assessing if a person is fit and proper to perform an FCA-specified significant-harm function, a firm must have regard, in particular, to whether that person:
(1) has obtained a qualification;
(2) has undergone, or is undergoing, training; (3) possesses a level of competence; or (4) has the personal characteristics, required by general rules made by the FCA. 27.2.6 5.2.8 G FIT 1.3 provides guidance to firms about the criteria that the FCA would expect the firm to consider in assessing if a person is fit and proper to perform an FCA-specified significant-harm function.

FCA 2018/XX
27.2.7
5.2.9
G SYSC 22 (Regulatory references) deals with obtaining references from a previous employer when a firm is planning to appoint someone to perform a specified significant-harm function as part of its assessment of whether that person is fit and proper. 27.2.8 5.2.10 G (1) A person seconded from a contractor may fall into the certification regime. The material in SYSC 27.4.1G is relevant to when this is the case. (2) In deciding if a person seconded from a contractor is fit and proper, the firm may take into account information and references from the contractor. (3) In deciding how much reliance to put on the contractor, the firm should take into account:
(a) the familiarity of the contractor with the obligations of firms under SYSC 27 this chapter, the corresponding PRA requirements and the requirements of the Act described in this section chapter; (b) whether any reference directly addresses the criteria in FIT; and (c) the degree to which the firm believes it can rely on the contractor’s judgement about the secondee’s fitness and properness and the grounds for that belief. Issuing and renewing certificates 27.2.9 5.2.11 G Under section 63F of the Act, a certificate issued by a firm to a person must:
(1) state that the firm is satisfied that the person is fit and proper to perform the function to which the certificate relates; and (2) set out the aspects of the affairs of the firm in which the person will be involved in performing the function. 27.2.10 5.2.12 G (1) The Act says that a certificate is valid for a period of 12 months, beginning with the day on which it is issued. (2) The FCA believes that the Act allows a firm to draft a certificate to expire after fewer than 12 months. The FCA interprets the Act in this way because to require a firm to make a certificate last longer than the firm thinks best is likely to make it harder for the firm to ensure the fitness of its certification employees. That would undermine the purpose of the certification regime in the Act. (3) A certificate cannot be drafted to last more than 12 months.

FCA 2018/XX
27.2.11
5.2.13
G Under section 63F of the Act, if, after having considered if a person is fit and proper to perform an FCA-specified significant-harm function, a firm decides not to issue a certificate to that person, the firm must give the person a notice in writing stating:
(1) what steps (if any) the firm proposes to take in relation to the person as a result of the decision; and (2) the reasons for proposing to take those steps. 27.2.12 5.2.14 G If, after having considered whether a person is fit and proper to perform an FCA-specified significant-harm function, a firm decides not to issue a certificate to that person, it should consider if the circumstances warrant making a notification to the FCA for a breach of the rules in COCON pursuant to SUP 15.3.11R (Breaches of rules and other requirements in or under the Act or the CCA). 27.2.13 5.2.15 G Under section 63F of the Act, a firm must maintain a record of every employee who has a valid certificate issued by it. 27.2.14 5.2.16(1) G (1) The FCA’s approach to specifying FCA-specified significant-harm functions has the effect that several elements of a person’s job may involve an FCA-specified significant-harm function or that a person may A firm need not issue multiple certificates for one of its employees even if they perform several FCA-specified significantharm functions as part of the same job. (2) Similarly, a firm need not issue multiple certificates for one of its employees who performs an FCA-specified significant-harm function that is made up of a number of different functions. (3) An example of an FCA-specified significant-harm function in (2) is the material risk taker FCA-specified significant-harm function described in SYSC 27.7.15R. SYSC 27.7.15R says that each function carried out by someone who is covered by that rule is an FCAspecified significant-harm function. 5.2.16(2) (4) However, this does not mean that the FCA expects a firm to issue multiple certificates to each certification employee. Rather than having to issue multiple certificates, in a certificate, a firm may, in a certificate, describe the employee’s functions that involve an FCAspecified significant-harm function in broad terms, and without listing all the activities that the function may involve. 5.2.16(3) (5) A firm should assess whether the employee is fit and proper to perform all aspects of the employee’s functions that involve an FCAspecified significant-harm function as described by a certificate. 27.2.15 5.2.17(1) G (1) In cases where a certification employee’s role changes to involve a new function involving an FCA-specified significant-harm function

FCA 2018/XX
part way through the twelve 12-month period for which their
certificate is valid, and that new function has may have different requirements relating to: the firm may need to reissue the certificate. (2) If that new function has different requirements relating to:
(a) personal characteristics;
(b) the level of competence, knowledge and experience; (c) qualifications; or (d) training; the FCA would expect the firm to assess whether the employee is fit and proper to perform that new function before they start it. 5.2.17(2) (3) A In such a case, the firm should not wait until the point of annual reassessment to determine whether the employee is fit and proper for the new function. 5.2.17(3) (4) Paragraphs (1) and (2) also apply if a certification employee’s role changes to involve a new FCA-specified significant-harm function
part way through the twelve-month period. A firm may not need to
issue a new certificate if:
(a) applying the conditions in paragraph (1) are met (2), the firm concludes that no re-assessment is required; and (b) the certificate is drafted broadly enough to cover the new FCA-specified significant-harm function. (5) Paragraphs (1) to (4) also apply if a certification employee’s role changes part way through the 12-month period without the new role involving a new FCA-specified significant-harm function. 27.2.16 5.2.17A G (1) This paragraph gives further guidance on the flexibility a firm has in drafting its certificates. (2) A certificate may cover functions that a certification employee is not currently performing, as long as the firm has assessed the employee’s fitness for these additional functions. This is subject to (3). (3) When a firm is deciding what a certificate can cover beyond the functions that the certification employee is currently performing, it should take the factors in SYSC 5.2.17G(1) SYSC 27.2.15G(2) into account. A certificate should not normally cover an additional function if SYSC 5.2.17G(1) SYSC 27.2.15G(2) would require the firm to consider the employee’s fitness before allowing them to perform it.

FCA 2018/XX
(4) A firm may, if it wishes, restrict a certificate to the functions that the certification employee is currently performing rather than drafting the certificate more widely as described in (2) and (3). (5) SYSC 27.2.10G deals with the flexibility a firm has in choosing the period for which a certificate lasts.
27.3 Territorial scope
Scope: territorial scope
27.3.1
5.2.19
R (1) A function is an FCA-specified significant-harm function for a UK relevant authorised person UK SMCR firm only to the extent:
(a) it is performed by a person from an establishment of the firm (or its appointed representative) in the United Kingdom; or (b) the person performing that function is dealing with a client of the firm in the United Kingdom from an establishment of the firm (or its appointed representative) overseas. (2) A function is an FCA-specified significant-harm function for a nonUK relevant authorised person SMCR firm, only to the extent that it is performed by a person from an establishment of the firm (or its appointed representative) in the United Kingdom. (3) Paragraph (1) does not apply to FCA-specified significant-harm function (7) (material risk takers). For a UK relevant authorised person SMCR firm, FCA-specified significant-harm function (7) applies without any territorial limitation. 27.3.2 5.2.20 G The FCA interprets the phrase ‘dealing with’ in SYSC 27.3.1R as including having contact with clients and extending beyond ‘dealing’ as used in the phrase ‘dealing in investments’. ‘Dealing in’ is used in Schedule 2 to the Act to describe in general terms the regulated activities which are specified in
Part II of the Regulated Activities Order.
27.3.3
5.2.20A
G The FCA interprets the phrase ‘a client of the firm in the United Kingdom’ in SYSC 27.3.1R as referring to:
(1) for a client which is a body corporate, its office or branch in the United Kingdom; or (2) for a client who is an individual, a client who is in the United Kingdom at the time of the dealing.

FCA 2018/XX
27.4 General material about the scope of the certification regime
Scope: employees Employees
27.4.1
5.2.21
G (1) The certification regime only applies to an employee.
(2) This definition includes a person who:
(a) personally provides, or is under an obligation personally to provide, services to the firm in question under an arrangement made between the firm and the person providing the services or another person; and (b) is subject to (or to the right of) supervision, direction or control by the firm as to the manner in which those services are provided. 27.4.2 5.2.22 G (1) A person who works for an appointed representative of a firm may fall into the certification regime. In practice, however, they may not meet the conditions for the certification regime to apply. (2) One condition for the certification regime to apply to a person is that the person performs a specified significant-harm function under an arrangement entered into by the firm (see SYSC 27.2.3G). However, unlike the equivalent parts of the Act for the approved persons regime, the Act does not say that the certification regime applies if the function is performed under an arrangement entered into by the employee with a contractor of the firm instead of the firm. (3) The certification regime only applies if the person concerned is an employee. This is defined in SYSC 27.4.1G. In many cases, a person working for an appointed representative will not fall into this definition as they may not:
(a) provide services to the firm; or
(b) be subject to (or to the right of) supervision, direction or control by the firm. (4) If none of these limitations on the scope of the certification regime apply, a person working for an appointed representative will be subject to the certification regime, as long as the other conditions in this section chapter are met. [Editor’s note: This provision will be reviewed in a second Consultation Paper] Scope: effect Effect of PRA requirements
27.4.3 G A specified significant-harm function does not cease to be an FCA-specified

FCA 2018/XX
5.2.23 significant-harm function if the PRA also specifies that function as a
specified significant-harm function.
Scope: exclusions Exclusions
27.4.4
5.2.24
G Under section 63E(7) of the Act, SYSC 27 this chapter does not apply to an arrangement which allows an employee to perform a function if the question of whether the employee is fit and proper to perform the function is reserved under any of the Single Market Directives or the auction regulation to an authority in a country or territory outside the United Kingdom. 27.4.5 5.2.25 R This section chapter does not apply to a function performed by a person acting as:
(1) an insolvency practitioner under section 388 of the Insolvency Act 1986; (2) a nominee in relation to a voluntary arrangement under Part I (Company Voluntary Arrangements) of the Insolvency Act 1986; (3) an insolvency practitioner under article 3 of the Insolvency (Northern Ireland) Order 1989; or (4) a nominee in relation to a voluntary arrangement under Part II (Company Voluntary Arrangements) of the Insolvency (Northern Ireland) Order 1989. 27.4.6 5.2.26 R A function performed by a non-executive director of a firm acting as such is not an FCA-specified significant-harm function for that firm.
27.4.7 G (1) An individual sole trader will not themselves be a certification
employee.
(2) However members of a sole trader’s staff may be.
(3) Therefore the certification regime does not apply to a sole trader with no employees.
27.5 Exclusions for emergency and temporary appointments
Scope: emergency Emergency appointments
27.5.1
5.2.27
R (1) If:
(a) a firm appoints an individual to perform a function which, but for this rule, would be an FCA-specified significant-harm function;

FCA 2018/XX
(b) the appointment is to provide cover for a certification employee whose absence is reasonably unforeseen; and (c) the appointment is for less than four weeks; then the performance by that individual of such function does not constitute an FCA-specified significant-harm function. (2) This rule does not apply to FCA-specified significant-harm function (5) (functions requiring qualifications). 27.5.2 5.2.28 G SYSC 27.5.1R does not apply to FCA-specified significant-harm function (5) (functions requiring qualifications). Where there is an unforeseen absence of an employee performing a function for which there is a qualification requirement:
(1) the firm should take reasonable care to ensure that no employee of that firm performs that function without a valid certificate; and (2) the certificate should be issued before the person starts to perform the function. Scope: temporary Temporary UK role (the 30-day rule) 27.5.3 5.2.28A R (1) None of the FCA-specified significant-harm functions extend to an individual (“P”) in relation to a firm if:
(a) P is based outside the United Kingdom for the firm; and (b) in a 12-month period, P spends no more than 30 days performing what would otherwise be an FCA-specified significant-harm function for that firm within the territorial scope of this section chapter as described in SYSC 27.3.1R. (2) Paragraph (1) only applies to the extent that P is appropriately supervised by:
(a) one of the firm’s SMF managers; or
(b) one of the firm’s certification employees whose certificate covers the FCA-specified significant-harm function that is to be disapplied under (1). (3) This rule does not apply to any FCA-specified significant-harm function to the extent that it involves:
(a) giving advice or performing related activities in connection with pension transfers, pension conversions or pension optouts for retail clients; or (b) giving advice to a person to become, or continue or cease to

FCA 2018/XX be, a member of a particular Lloyd’s syndicate.
(4) In the case of a UK relevant authorised person SMCR firm, this rule does not apply to FCA-specified significant-harm function (7) (material risk takers). 27.5.4 5.2.28B G SYSC 27 Annex 1G gives examples of how SYSC 27.5.3R works. 27.5.5 5.2.28C( 1) G The FCA would expect an individual from overseas using the temporary UK role rule in SYSC 27.5.3R to be accompanied on a visit to a customer in the United Kingdom. 27.5.6 5.2.28C( 2) G An individual benefiting from the temporary UK role rule in SYSC 27.5.3R may still be subject to the requirements of TC (Training and competence). However, TC 2.1.9R gives an exemption from certain qualification requirements in TC to an individual benefiting from the temporary UK role rule.
27.6 Specification of functions
Scope: general General requirements
27.6.1
5.2.18
R In accordance with section 63E of the Act (Certification of employees by relevant authorised persons), a function is an FCA-specified significantharm function only if, in relation to the carrying on of a regulated activity by a firm, that function:
(1) is not a controlled function in relation to the carrying on of that regulated activity by that firm; and (2) will require the person performing it to be involved in one or more aspects of the firm’s affairs, so far as relating to that regulated activity. Scope: FCA-specified significant-harm functions 27.6.2 5.2.29 R In accordance with section 63E(3) of the Act, the functions in the table in SYSC 27.6.3R are FCA-specified significant-harm functions. 27.6.3 5.2.30 R Table: FCA-specified significant-harm functions Function Where defined (1) CASS oversight SYSC 27.7.1R

FCA 2018/XX
(2) Benchmark submission and administration SYSC 27.7.3R (3) Proprietary trader SYSC 27.7.4R (4) Significant management SYSC 27.7.5R (5) Functions requiring qualifications SYSC 27.7.11R (6) Managers of certification employees SYSC 27.7.13R (7) Material risk takers SYSC 27.7.14R (8) Client-dealing SYSC 27.7.18R (9) Algorithmic trading SYSC 27.7.23R 27.6.4 5.2.31 G (1) If a function falls into more than one of the FCA-specified significant-harm functions in the table in SYSC 27.6.3R, all of those FCA-specified significant-harm functions apply to it. (2) For example, if a person’s job involves both FCA-specified significant-harm function (5) (functions requiring qualifications) and (7) (material risk takers), the emergency appointments rule (SYSC 27.5.1R) does not apply to that job. (3) Another example is the rule about the territorial scope of this section (SYSC 27.3.1R)) for a UK relevant authorised person SMCR firm. For example, if a person’s job involves both FCA-specified significant-harm function (5) (functions requiring qualifications) and (7) (material risk takers), the territorial restriction in that rule does not apply to that job. Instead, this section chapter applies without any territorial limitation. (4) The reason for (3) is that SYSC 5.2.19R(3)) SYSC 27.3.1R(3) says that there is no territorial limitation on FCA-specified significantharm function (7) for a UK relevant authorised person SMCR firm. As explained in (1), it does not matter that the job also involves FCA-specified significant-harm function (5), to which the territorial limitation does apply.
27.7 Definitions of the FCA-specified significant-harm functions
CASS oversight function

FCA 2018/XX
27.7.1
5.2.32
R (1) Each of the following is an FCA-specified significant-harm function:
(a) in relation to a CASS medium firm and a CASS large firm (other than a CASS large debt management firm), the function of acting in the capacity of a person who is allocated the function in CASS 1A.3.1AR (oversight of operational effectiveness); (b) in relation to a CASS large debt management firm, the function of acting in the capacity of a person who is allocated the function in CASS 11.3.4R (oversight of operational effectiveness); (c) in relation to a CASS small firm, the function of acting in the capacity of a person who is allocated the function in CASS 1A.3.1R (oversight of operational effectiveness). (2) A function in (1) is not an FCA-specified significant-harm function for that firm if it is performed by an SMF manager of that firm. 27.7.2 5.2.32A G SYSC 5.2.32R(1) SYSC 27.7.1R(1) only applies to a firm to the extent that CASS applies to that firm. Benchmark submission and administration function 27.7.3 5.2.33 R Each of the following is an FCA-specified significant-harm function:
(1) acting in the capacity of a person who is allocated the function in MAR 8.2.3R(1) (benchmark manager); and (2) acting in the capacity of a person who is allocated the function in MAR 8.3.5R(1) (benchmark administration manager). Proprietary trader function 27.7.4 5.2.34 R The function of acting as a proprietary trader whose activity involves, or might involve, a risk of significant harm to the firm or any of its customers is an FCA-specified significant-harm function. Significant management function 27.7.5 5.2.35 R (1) The function of acting as a senior manager, with significant responsibility for a significant business unit, is an FCA-specified significant-harm function. (2) For a non-UK relevant authorised person’s SMCR firm’s branch in the United Kingdom, the significant management function is limited to business units of the branch.

FCA 2018/XX
27.7.6
5.2.36
G A senior manager carrying on the significant management FCA-specified significant-harm function under SYSC 27.7.5R could, for example, be:
(1) the head of a unit carrying on the activities of:
(a) retail banking;
(b) personal lending;
(c) corporate lending;
(d) salvage or loan recovery; or
(e) proprietary trading; or
(f) designated investment business;
(g) effecting contracts of insurance;
(h) credit-related regulated activity;
(i) making material decisions on the commitment of the firm’s financial resources, its financial commitments, its assets acquisitions, its liability management or its overall cash and capital planning; (j) processing confirmations, payments, settlements, insurance claims, client money and similar matters; (k) administration of contracts of insurance; (l) complaints handling; or (m) determining whether an applicant should be accepted for credit (including lending) and on what terms; or (2) a member of a committee (that is, a person who, together with others, has authority to commit the firm) making decisions in these functions.
27.7.7 G The examples in SYSC 27.7.6G are illustrative only. They are not intended
to be exhaustive.
27.7.8 G A business unit is not limited to one that carries on commercial activities
with customers and third parties or that earns revenue. A business unit can be an internal support department that has no contact with people outside the firm. It may include, for example, human resources, operations or information technology. 27.7.9 5.2.37 G For the purposes of the definition of the significant management FCAspecified significant-harm function, the following additional factors about

FCA 2018/XX the firm should be considered:
(1) the size and significance of the firm’s business in the United Kingdom – for example, a firm carrying on designated investment business may have a large number of certification employees (for example, in excess of 100 individuals); (2) the number of regulated activities carried on, or proposed to be carried on, by the firm and (if relevant) other members of the group; (3) its group structure (if it is a member of a group); (4) its management structure (for example, matrix management); and (5) the size and significance of its international operations, if any. 27.7.10 5.2.38 G When considering whether a business unit is significant for the purposes of SYSC 27.7.5R, the firm should take into account all relevant factors in the light of the firm’s current circumstances and its plans for the future, including:
(1) the risk profile of the unit;
(2) its use or commitment of the firm’s capital; (3) its contribution to the profit and loss account; (4) the number of employees, certification employees or SMF managers in the unit; (5) the number of customers of the unit; and (6) any other factor which makes the unit significant to the conduct of the firm’s affairs so far as relating to the regulated activity. Functions requiring qualifications 27.7.11 5.2.39 R (1) Each function involving an activity for which there is a qualification requirement as specified in TC App 1.1.1R (Activities and Products/Sectors to which TC applies) is an FCA-specified significant-harm function. (2) For a non-UK relevant authorised person SMCR firm, each function involving an activity for which there would have been a qualification requirement, as specified in (1) if the firm had been a UK relevant authorised person SMCR firm, is an FCA-specified significant-harm function. 27.7.12 5.2.40 G (1) SYSC 27.7.11R (Functions requiring qualifications) does not apply to a UK relevant authorised person SMCR firm where TC does not apply.

FCA 2018/XX
(2) SYSC 27.7.11R (Functions requiring qualifications) applies to a nonUK relevant authorised person SMCR firm irrespective of whether the function in TC App 1.1.1R (Activities and Products/Sectors to which TC applies) applies to incoming EEA firms or overseas firms for the purposes of TC. (3) The extended territorial scope of qualification requirements as specified in TC App 2.1.1R (Territorial Scope subject to the limitation in TC Appendix 3) does not apply in full to the FCAspecified significant-harm function in SYSC 27.7.11R because SYSC 27.3.1R (Territorial scope) restricts the scope of this chapter outside the United Kingdom. Managers of certification employees 27.7.13 5.2.41 R (1) The function of managing or supervising a certification employee, directly or indirectly, is an FCA-specified significant-harm function. (2) A function in (1) is not an FCA-specified significant-harm function for that firm if it is performed by an SMF manager of that firm. Material risk takers
27.7.14 R Each function performed by a person in column (2) of the table in SYSC
27.7.15R is an FCA-specified significant-harm function with respect to a firm in the corresponding entry in column (1).
27.7.15 R Table: Definition of material risk taker
Type of SMCR firm Employees included
(1) A UK SMCR dual regulated banking sector firm A third-country SMCR dual regulated banking sector firm Each member of the dual-regulated firms Remuneration Code staff of the firm in column (1). This includes any person who meets any of the criteria set out in articles 3 to 5 of Commission Delegated Regulation (EU) No 604/2014 (criteria to identify categories of staff whose professional activities have a material impact on an institution’s risk profile)). (2) An EEA SMCR dual regulated banking sector firm For these purposes subparagraphs (i) and (ii) in SYSC 19D.1.1R(1)(d) (application of the dual-regulated firms In relation to a firm in column (1), the definition of dual-regulated firms Remuneration Code staff is extended so that it includes employees of this kind of firm in the same way as it includes employees of a third-country SMCR

FCA 2018/XX
Remuneration Code) do not apply. dual regulated banking sector firm. (3) A firm falling within SYSC 19A.1 (application provisions for the remuneration code for IFPRU investment firms) Each member of the Remuneration Code staff of the firm in column (1). (4) A firm that would fall within SYSC 19A.1 if it applied to an incoming EEA firm For these purposes subparagraphs (i) and (ii) in SYSC 19A.1.1R(1)(d) (application of the Remuneration Code) do not apply. In relation to a firm in column (1), the definition of Remuneration Code staff is extended so that it includes employees of this kind of firm in the same way as it includes employees of an overseas firm in row (3) of this
table.
(5) A firm falling within SYSC
19B.1 (application provisions for the remuneration code for a fullscope UK AIFM) Each member of the AIFM Remuneration Code staff of the firm in column (1). (6) An above-threshold non-EEA AIFM or an incoming EEA AIFM In relation to a firm in column (1), the definition of AIFM Remuneration Code staff is extended so that it includes employees of this kind of firm in the same way as it includes employees of firms in row (5) of this table. (7) A firm falling within SYSC 19C.1 (application provisions for remuneration code for BIPRU firms) Each member of the BIPRU Remuneration Code staff of the firm in column (1). (8) A firm that would fall within SYSC 19C.1 if it applied to an incoming EEA firm or an incoming Treaty firm In relation to a firm in column (1), the definition of BIPRU Remuneration Code staff is extended so that it includes employees of this kind of firm in the same way as it includes employees of a third country BIPRU firm in column (1) of row (7) of this
table.
(9) A firm falling within SYSC
19E.1 (application provisions for remuneration code for UCITS management companies) Each member of the UCITS Remuneration Code staff of the firm in column (1). (10) An EEA UCITS management In relation to a firm in column (1), the definition of UCITS Remuneration

FCA 2018/XX company Code staff is extended so that it includes employees of this kind of firm in the same way as it includes employees of firms in row (9) of this
table.
(11) A Solvency II firm Persons referred to in articles 275.1(c) and (d) of Solvency II Regulation 2015/35 (key functions and staff with a material impact).
27.7.16 G If the definitions or requirements in column (2) of the table in SYSC
27.7.15R (as adjusted) do not apply to a firm in the corresponding entry in column (1), that row of the table does not apply to the firm.
27.7.17 G One result of SYSC 27.7.16G is that a credit union is excluded from the table
in SYSC 27.7.15R. Therefore the material risk taker FCA-specified significant-harm function does not apply to a credit union. However, it is subject to equivalent PRA requirements. Client-dealing function 27.7.18 5.2.44 R A person (“P”) performs the client-dealing FCA-specified significant-harm function for a firm if:
(1) P is carrying out any of the activities in the table in SYSC 27.7.19R; and (2) those activities will involve P dealing with:
(a) a person with or for whom those activities are carried out; or (b) the property of any such person; in a manner substantially connected with the carrying on of regulated activities by the firm. 27.7.19 5.2.45 R Table: Activities covered by the client-dealing FCA-specified significantharm function Activity Comments (1) The following activities: (a) does not include advising on investments in the course of carrying on the activity of giving basic advice on a stakeholder product. (a) advising on investments other than a non-investment insurance contract; or

FCA 2018/XX
(b) performing other functions related to this, such as dealing and arranging. (2) The following activities:
(a) giving advice in connection with corporate finance business; or (b) performing other functions related to this. (3) If the firm does any of the following activities:
(a) and (b) do not include dealing or arranging (bringing about) deals in investments in a non-investment insurance contract. (a) dealing, as principal or as agent; or For the activity in this row (3), SYSC 5.2.44R(2)(a) and (b) SYSC 27.7.18R(2)(a) and (b) are expanded to cover also:
(b) arranging (bringing about) deals in investments; (a) a person in connection with whom the activities in the first column of this row are carried out; and taking part in those activities is included. (b) the property of any such person. (4) If the firm is acting in the capacity of an investment manager the following are included:
(a) taking part in that activity; and
(b) carrying on functions connected to this.
(5) Acting as a ‘bidder’s representative’ in relation to bidding in emissions auctions. Acting as a ‘bidder’s representative’ has the meaning in sub-paragraph 3 of article 6(3) of the auction regulation. 27.7.20 5.2.46 G SYSC 27.3.2G (the FCA interprets the phrase ‘dealing with’ as including having contact with and extending beyond ‘dealing’ as used in ‘dealing in investments’) applies to SYSC 27.7.18R.

FCA 2018/XX
27.7.21
5.2.47
G The client-dealing FCA-specified significant-harm function generally involves dealing with any person with or for whom the activities in the table in SYSC 27.7.19R are carried out (or their property). That person need not be a client of the firm. 27.7.22 5.2.48 G The restrictions in SYSC 27.6.1R (FCA-specified significant-harm function should require the person performing it to be involved in one or more aspects of the firm’s affairs so far as they relate to regulated activities) also applies to the client-dealing FCA-specified significant-harm function. Algorithmic trading function 27.7.23 5.2.49 R (1) Each of the following is an FCA-specified significant-harm function:
(a) approving the deployment of:
(i) a trading algorithm or a part of one; or (ii) an amendment to a trading algorithm or a part of one; or (iii) a combination of trading algorithms; and (b) each of the following functions:
(i) having significant responsibility for the management of monitoring whether or not a trading algorithm; and (ii) deciding whether or not a trading algorithm; is, or remains, compliant with the firm’s obligations. (2) The firm’s obligations in (1)(b) include:
(a) the firm’s regulatory obligations; and (b) the rules and requirements of the trading venues to which the firm’s trading systems are connected. 27.7.24 5.2.50 R (1) A trading algorithm means a computer algorithm used in algorithmic trading algorithmic trading. (2) Algorithmic trading has the meaning in Directive 2014/65/EU of the European Parliament and of the Council of 15 May 2014 on markets in financial instruments. 27.7.25 5.2.51 G Algorithmic trading Algorithmic trading is not limited to high-frequency algorithmic trading.

FCA 2018/XX
27.7.26
5.2.52
G Deploying a trading algorithm includes deploying one on a trading venue on which the firm has not traded before where the firm is already using that trading algorithm on another trading venue. 27.7.27 5.2.53 G SYSC 5.2.49R(1)(b) SYSC 27.7.23R(1)(b) (monitoring or deciding whether or not a trading algorithm is compliant) includes testing, such as validation and stress testing. 27.7.28 5.2.54 G (1) Sometimes an approval or a decision involves sign-off from different people about different aspects of the decision or approval. (2) If this is the case, all will have given the approval or decision for the purposes of SYSC 27.7.23R. 27.2.29 5.2.55 G (1) Sometimes an approval or decision involves sign-off by a number of people of different levels of seniority about the same aspects of the decision. (2) If this is the case, only the most senior decision-taker gives the approval or decision for the purposes of SYSC 27.7.23R. (3) Where the firm’s procedures do not require the more senior person to carry out a detailed review of the decision of the more junior, both the junior and the senior person will give the approval or decision. 27.7.30 5.2.56 G A firm may have deployed an algorithm even though:
(1) it has not yet actually been used in the generation or acceptance of orders; or (2) it is not actually being used in the generation or acceptance of orders at the moment; or (3) it is not currently being used in the generation or acceptance of orders because the circumstances have not arisen for it to start doing so. 27.7.31 5.2.57 G In the examples in SYSC 27.7.30G the algorithm is capable of being used in the generation or acceptance of orders but is not actually generating or accepting them at the moment. However, a firm does not deploy an algorithm if the algorithm is not yet capable of generating or accepting orders because, for example, it is still in development.
Annex
Examples of how the temporary UK role rule in SYSC 27.5.3R (the 30-day rule) works

FCA 2018/XX
1G
5 Annex
1G
Example How the temporary UK role rule applies (1) A spends 20 days in the UK performing the proprietary trader FCA-specified significant-harm function for Firm X and wishes to spend another 20 days in the UK performing the significant management FCA-specified significant-harm function for Firm X. The rule does not allow this. There is a single 30-day allowance, not a separate 30-day allowance for each FCA-specified significant-harm function. (2) A spends 20 days in the UK performing an FCA-specified significant-harm function for Firm X (which is a UK relevant authorised person UK SMCR firm) and wishes to spend another 20 days dealing with Firm X’s clients in the UK from the overseas office of Firm X in which A is based. The rule does not allow this. There is a single 30-day limit for both types of contact with the UK. (3) A wishes to spend 40 days dealing with Firm X’s clients in the UK from the overseas office of Firm X (which is a UK relevant authorised person UK SMCR firm) in which A is based. However the total time spent doing that will only be a few hours overall. The rule does not allow this. If A deals with a UK client on one day, that uses up one day of the 30-day allowance, however short the time for which the contact lasts. (4) A spends 25 days in calendar year one for Firm X in the UK and 25 days in calendar year two. However A spends 40 days in the UK for Firm X between June in calendar year 1 and June in calendar year 2. The rule does not allow this. This is because the 30-day annual allowance relates to any 12-month period and not just a calendar year. (5) Firm X is a non-UK relevant authorised person non-UK SMCR firm. A is employed by Firm X and is based in one of its offices outside the UK. A wants to work in the UK branch for 10 days. The rule applies to non-UK relevant authorised persons non-UK SMCR firms. It does not matter that A is not employed by the UK branch and instead is employed by another part of Firm X. It does not make a difference whether A is based in an office of Firm X in its home state or one in a third country.

FCA 2018/XX
(6) A is based in one of Firm X’s overseas offices. Firm X then decides to relocate A to the UK, where A will be certified to perform an FCA-specified significant-harm function for Firm X. Firm X wants to rely on the temporary UK role rule for the first 30 days while Firm X goes through the certification process for A. The rule does not allow this. A is no longer based in an overseas office and so the rule does not apply. (7) A is based in the overseas branch of a UK relevant authorised person UK SMCR firm. A is to be promoted, so that A will be performing the material risk taker FCAspecified significant-harm function. Firm X wants to rely on the temporary UK role rule for the first 30 days while Firm X goes through the certification process for A. The rule does not allow this because it does not apply to the material risk taker FCA-specified significant-harm function when it is performed for a UK relevant authorised person UK SMCR firm. A reference in this table to an FCA-specified significant-harm function is to a function that would have been an FCA-specified significant-harm function but for SYSC 27.5.3R (temporary UK role).

FCA 2018/XX
Annex D
Amendments to the Code of Conduct sourcebook (COCON) In this Annex, underlining indicates new text and striking through indicates deleted text. 1 Application and purpose
1.1 Application
1.1.1 G Under section 64A of the Act, the FCA may make rules about the conduct of
certain persons working in firms.
To whom does it apply?
1.1.1A R COCON applies to the persons set out in the table in COCON 1.1.2R.
1.1.2 R Table: To whom does COCON apply?
Persons to whom COCON Applies Comments
(1) An SMF manager.
(2) An employee (“P”) of a relevant authorised person an SMCR firm who:
(a) performs the function of an
SMF manager;
(b) is not an approved person to perform the function in question; and (c) is required to be an approved person at the time P performs that function. (3) An employee of a relevant authorised person an SMCR firm who would be an SMF manager but for SUP 10C.3.13R (The 12- week rule). (4) A certification employee employed by a relevant authorised person an SMCR firm. This applies even if the certification employee has not been notified that COCON applies to them or notified of the rules that apply to them. (5) An employee of a relevant authorised person an SMCR firm

FCA 2018/XX who would be a certification employee but for SYSC 5.2.27R(1) SYSC 27.5.1R(1) (Scope:
emergency Emergency appointments) or SYSC 5.2.28AR SYSC 27.5.3R (Scope: temporary Temporary UK role). (6) Any employee of a relevant authorised person an SMCR firm not coming within another row of this table, except one listed in column (2) of this table. This row does not apply to an employee of a relevant authorised person an SMCR firm who only performs functions falling within the scope of the following roles:
(a) receptionists;
(b) switchboard operators;
(c) post room staff;
(d) reprographics/print room staff;
(e) property/facilities management;
(f) events management;
(g) security guards;
(h) invoice processing;
(i) audio visual technicians;
(j) vending machine staff;
(k) medical staff;
(l) archive records management;
(m) drivers;
(n) corporate social responsibility staff; (o) data controllers or processors under the Data Protection Act 1998; (p) cleaners; (q) catering staff; (r) personal assistant or secretary; (s) information technology support (ie, helpdesk); and (t) human resources administrators /processors. (7) An FCA-approved person or PRAapproved person approved to perform This row does not apply to approved persons approved to

FCA 2018/XX a controlled function in a Solvency II firm or a small non-directive insurer. [deleted] perform a controlled function in SUP 10A.1.15R to SUP 10A.1.16BR (appointed representatives). (8) A board director of a UK SMCR firm (a) a relevant authorised person; (b) a Solvency II firm; or (c) a small non-directive insurer. This row only applies to a UK domestic firm. Note: In accordance with the Glossary, Solvency II firm includes a large non-directive insurer. 1.1.2A R For Swiss general insurers, references in this sourcebook to parts of the PRA Rulebook for ‘Solvency II firms’ are to be read as references to the corresponding parts of the PRA Rulebook applying to large non-directive insurers.
1.1.3 R Rules 1 to 5 in COCON 2.1 apply to all conduct rules staff.
1.1.4 R (1) Rules SC1 to SC4 in COCON 2.2 apply to all senior conduct rules
staff members (subject to (2)).
(2) SC1 to SC3 in COCON 2.2 do does not apply to a standard nonexecutive director board director who is not an approved person (P) unless, P also satisfies as well as being a standard non-executive director, they also fall into one of the other categories of a senior conduct rules staff member.
1.1.5 G (1) The guidance in COCON 2.3 applies to relevant authorised persons
SMCR firms.
(2) [deleted]
(3) SYSC 27.4.6R provides that a function performed by a non-executive director of a firm acting as such is not an FCA-specified significantharm function for that firm. To what conduct does it apply?
1.1.6 R For a person (P) who is an approved person, COCON applies to the conduct
of P in relation to the performance by P of functions relating to the carrying on of activities (whether or not regulated activities) by the firm (Firm A) on whose application approval was given to P. [Note: sections 64A(4) and (5)(a) of the Act (Rules of conduct)] 1.1.6A R For a person (P) who is a board director of a firm (Firm A) but is not an approved person of Firm A, COCON applies to the conduct of P in relation to the performance by P of functions relating to the carrying on of activities

FCA 2018/XX
(whether or not regulated activities) by Firm A.
[Note: sections 64A(4) and (5)(ab) of the Act (Rules of conduct)]
1.1.7 R (1) For a person (P) subject to COCON who is not an approved person,
COCON applies to the conduct of P in relation to the performance by P of functions relating to the carrying on of activities (whether or not regulated activities) by P’s employer (Firm A). (2) This rule does not apply where COCON 1.1.6A applies. [Note: sections 64A(4) and (5)(b) of the Act (Rules of conduct)] 1.1.7A R (1) Where Firm A in COCON 1.1.6R to COCON 1.1.7R is an SMCR firm other than an SMCR dual regulated banking sector firm, the application of COCON is further restricted by this rule. (2) COCON only applies to any conduct that forms part of or is for the purpose of any of the following:
(a) the SMCR financial activities of Firm A; or (b) any activities of Firm A that have, or might reasonably be regarded as likely to have, a negative effect on:
(i) the integrity of the UK financial system; or (ii) the ability of Firm A to meet the “fit and proper” test in threshold condition 2E and 3D (Suitability); or (iii) the ability of Firm A to meet the applicable requirements and standards under the regulatory system relating to Firm A’s financial resources.
1.1.8 G (1) COCON 1.1.6R and to COCON 1.1.7R 1.1.7AR may apply to the
same individual performing several roles.
(2) For example, say that an individual (A) is an approved person for firm X and is employed by firm Y in a role that does not involve a controlled function or being a director. Say that firm X is a Solvency II firm or a small non-directive insurer and that firm Y is a relevant authorised person. (3) COCON 1.1.6R applies to A’s role with firm X and COCON 1.1.7R applies to A’s role with firm Y. Where does it apply?
1.1.9 R (1) COCON applies to the conduct of conduct rules staff set out in (2)
wherever it is performed.
(2) This rule applies to:

FCA 2018/XX
(a) a senior conduct rules staff member; and (b) a certification employee performing FCA-specified significant-harm function (7) (material risk takers) in the
table in SYSC 5.2.30R for a UK relevant authorised person
UK SMCR firm.
1.1.10 R (1) This rule applies to members of a firm’s conduct rules staff apart
from conduct rules staff in COCON 1.1.9R.
(2) Subject to (3), COCON only applies to the conduct of persons to whom this rule applies (as set out in (1)) if that conduct:
(a) is performed from an establishment maintained in the United Kingdom by: an SMCR firm; or (i) (for a relevant authorised person) that person’s employer; or (ii) (for a Solvency II firm or a small non-directive insurer) the firm in relation to whom that person carries out controlled functions; or (b) involves dealing with a client of the firm in the United Kingdom from an establishment overseas. (3) Paragraph (2)(b) only applies to a UK relevant authorised person SMCR firm.
1.1.11 G The FCA interprets the phrase ‘dealing with’ in COCON 1.1.10R as
including having contact with customers and extending beyond ‘dealing’ as used in the phrase ‘dealing in investments’. ‘Dealing in’ is used in Schedule 2 to the Act to describe, in general terms, the regulated activities which are specified in Part II of the Regulated Activities Order. 1.11A G The FCA interprets the phrase ‘a client of the firm in the United Kingdom’ in COCON 1.1.10R as referring to:
(1) for a client which is a body corporate, its office or branch in the United Kingdom; or (2) for a client who is an individual, a client who is in the United Kingdom at the time of the dealing.
1.1.12 R A person will not be subject to COCON to the extent that it would be
contrary to the UK’s obligations under a Single Market Directive or the auction regulation. Purpose
1.1.13 G The purpose of this chapter is to set out rules for conduct rules staff and to
provide guidance about those rules to firms whose staff are subject to them.

FCA 2018/XX
1.1.14 G COCON 1 Annex 1 has guidance on the role and responsibilities of nonexecutive directors to whom COCON applies.
1.2 Investments
1.2.1 G COCON refers in a number of places to ‘investments’. The Glossary
meaning of investment is wide and is not just limited to the ordinary dictionary meaning.
1.2.2 G Therefore, for example, an approved person performing controlled functions
in a Solvency II firm or a small non-directive insurer should note that that term includes rights under a contract of insurance, meaning they should also take into account those parts of COCON which provide guidance on individual conduct rules that refer to ‘investments’.
1.2.3 G Where guidance refers to risks associated with investments that will include
risks applicable to rights under a contract of insurance including for example the risk of inadequate cover. … 1 Annex 1G Guidance on the role and responsibilities of NEDs non-executive directors of SMCR firms subject to COCON 1 Introduction
1.1 This annex applies to non-executive directors (NEDs) of: an SMCR firm.
(1) a relevant authorised person;
(2) a Solvency II firm (including a large non-directive insurer); or (3) a small non-directive insurer.
1.2 This annex covers the role of a NED in performing the roles in (1) to (4), below:
(1) the role of chairman of the board of directors; (2) the role of chairman of the nomination committee; (3) the role of chairman of any other committee (irrespective of whether performing that role is itself a designated senior management function); (4) the general NED role.
1.3 The FCA’s view of the role of a NED is consistent with the duties of directors
included in UK company law and the description of the role of a NED in the UK Corporate Governance Code. 2 The general role of a NED
2.1 The role of a NED performing the general NED role is to:

FCA 2018/XX
(1) provide effective oversight and challenge; and (2) help develop proposals on strategy.
2.2 To deliver this, their responsibilities include:
(1) attending and contributing to board and committee meetings and discussions; (2) taking part in collective board and committee decisions, including voting and providing input and challenge; and (3) ensuring they are sufficiently and appropriately informed of the relevant matters prior to taking part in board or committee discussions and decisions.
2.3 Other key roles of a NED include:
(1) scrutinising the performance of management in meeting agreed goals and objectives; (2) monitoring the reporting of performance; (3) satisfying themselves on the integrity of financial information; (4) satisfying themselves that financial controls and systems of risk management are robust and defensible; (5) scrutinising the design and implementation of the remuneration policy; (6) providing objective views on resources, appointments and standards of conduct; and (7) being involved in succession planning. 3 Role of a NED as chair of the board or a committee
3.1 Subject to any specific governance arrangements, rules or requirements applicable
to the board or particular committees, a NED’s responsibility as chairman of the board or a committee includes:
(1) ensuring that the board or committee meets with sufficient frequency; (2) fostering an open, inclusive discussion which challenges executives, where appropriate; (3) ensuring that the board or committee devotes sufficient time and attention to the matters within its remit; (4) helping to ensure that the board or committee and its members have the information necessary to its and their tasks;

FCA 2018/XX
(5) reporting to the main board on the committee’s activities; and (6) facilitating the running of the board or committee to assist it in providing independent oversight of executive decisions; (7) in relation to the nomination committee, safeguarding the independence and overseeing the performance of the nomination committee.
3.2 The chair of the nomination committee should take reasonable steps to ensure that
the nomination committee complies with:
(1) the requirements in SYSC 4.3A about the nomination committee (if that
part of SYSC applies to the firm); and
(2) any specific and relevant requirements relating to the committee or to the matters within the committee’s responsibilities.
3.3 SYSC 4.3A.8R and SYSC 4.3A.9R deal with the nomination committee for
relevant authorised persons. There is no equivalent material for Solvency II firms. Although being the chair of the nomination committee is not a controlled function for a small non-directive insurer, paragraph Paragraph 3.2 of this annex is still relevant to a small non-directive insurer firm:
(1) that is not required by the Handbook to have a nomination committee; or (2) for which being the chair of such a committee is not a controlled function; if it has such a committee. 4 General approach to the role of a NED
4.1 The FCA recognises that NEDs individually do not manage a firm’s business in
the same way as executive directors. Therefore, the responsibilities for which NEDs are accountable are likely to be more limited.
4.2 A NED is neither required nor expected to assume executive responsibilities.
4.3 Although NEDs who are subject to the senior management regime for SMF
managers or the approved persons regime for insurers have individual duties under that regime, the FCA views the regime and its application as consistent with the principle of collective decision-making.
4.4 The standard of care, skill and diligence that the FCA would expect from a NED
is the care, skill and diligence that would be exercised by a reasonably diligent person with:
(1) the general knowledge, skill and experience that may reasonably be expected of a person carrying out the functions carried out by the NED in relation to the firm, taking into account the standards in the Handbook (especially COCON and DEPP); and

FCA 2018/XX
(2) the general knowledge, skill and experience that the NED has. 2 Individual conduct rules
2.1 Individual conduct rules
2.1.1 R Rule 1: You must act with integrity.
2.1.2 R Rule 2: You must act with due skill, care and diligence.
2.1.3 R Rule 3: You must be open and cooperative with the FCA, the PRA and other
regulators.
2.1.4 R Rule 4: You must pay due regard to the interests of customers and treat them
fairly.
2.1.5 R Rule 5: You must observe proper standards of market conduct.
2.2 Senior management conduct rules
2.2.1 R SC1: You must take reasonable steps to ensure that the business of the firm
for which you are responsible is controlled effectively.
2.2.2 R SC2: You must take reasonable steps to ensure that the business of the firm
for which you are responsible complies with the relevant requirements and standards of the regulatory system.
2.2.3 R SC3: You must take reasonable steps to ensure that any delegation of your
responsibilities is to an appropriate person and that you oversee the discharge of the delegated responsibility effectively.
2.2.4 R SC4: You must disclose appropriately any information of which the FCA or
PRA would reasonably expect notice.
2.3 Firms: Training and breaches
2.3.1 G Under section 64B of the Act, a relevant authorised person an SMCR firm
must:
(1) ensure that all persons subject to the rules in COCON are notified of the rules that apply to them; and (2) take all reasonable steps to ensure that those persons understand how the rules in COCON apply to them.
2.3.2 G (1) The steps that a relevant authorised person an SMCR firm must take

FCA 2018/XX to secure ensure that its conduct rules staff understand how the rules in COCON apply to them include the provision of suitable training. (2) Suitable training should always ensure that those who are subject to the rules in COCON have an awareness and broad understanding of all of the rules in COCON, and that they also have a deeper understanding of the practical application of the specific rules which are relevant to their work. (3) For example:
(a) for individuals who trade in the markets, rule 5 in COCON 2.1.5R may apply in various circumstances arising in the individual’s day-to-day activities and additional training may be appropriate to ensure that the individual knows how that rule applies to those activities in those various circumstances; or (b) for individuals who deal directly with customers, rule 4 in COCON 2.1.4R may apply in various circumstances which makes additional training appropriate for such individuals.
2.3.3 G There are rules and guidance in SUP 15.3 (General notification
requirements) and SUP 15.11 (Notification of COCON breaches and disciplinary action) that deal with reporting by a relevant authorised person an SMCR firm of COCON breaches to the FCA. 3 General factors for assessing compliance
3.1 General factors for assessing compliance
3.1.1 G Where descriptions of conduct are provided in this chapter which exemplify
breaches of the rules in COCON, they are not intended to be an exhaustive list of the kind of conduct that may contravene the relevant rule.
3.1.2 G In assessing compliance with, or a breach of, a rule in COCON, the FCA
will have regard to the context in which a course of conduct was undertaken, including:
(1) the precise circumstances of the individual case; (2) the characteristics of the particular function performed by the individual in question; and (3) the behaviour expected in that function.
3.1.3 G Without prejudice to section 66A of the Act, a person will only be in breach
of any of the rules in COCON where they are personally culpable. Personal culpability arises where:

FCA 2018/XX
(1) a person’s conduct was deliberate; or (2) the person’s standard of conduct was below that which would be reasonable in all the circumstances.
3.1.4 G In determining whether or not the particular conduct of a person complies
with the rules in COCON, factors the FCA would expect to take into account include:
(1) whether that conduct relates to activities that are subject to other provisions of the Handbook; (2) whether that conduct is consistent with the requirements and standards of the regulatory system relevant to the person’s firm.
3.1.5 G In determining whether or not the conduct of a senior conduct rules staff
member complies with rules SC1 to SC4 in COCON, factors the FCA would expect to take into account include:
(1) whether they exercised reasonable care when considering the information available to them; (2) whether they reached a reasonable conclusion upon which to act; (3) the nature, scale and complexity of the firm’s business; (4) their role and responsibility as determined by reference to the relevant statement of responsibility; (5) the knowledge they had, or should have had, of regulatory concerns, if any, relating to their role and responsibilities.
3.1.6 G In assessing whether a senior conduct rules staff member may have breached
a rule in COCON, the nature, scale and complexity of the business and the role and responsibility of the individual undertaking the activity in question within the firm will be relevant in assessing whether that person’s conduct was reasonable. For example, the smaller and less complex the business, the less detailed and extensive the systems of control need to be.
3.1.7 G UK domestic firms listed on the London Stock Exchange are subject to the
UK Corporate Governance Code, whose internal control provisions are explained in the publication entitled ‘Internal Control: Revised Guidance for Directors on the Combined Code (October 2005)’ issued by the Financial Reporting Council. Therefore, firms in this category will be subject to that code, as well as to the rules in COCON. In forming an opinion as to whether a senior conduct rules staff member has complied with the rules in COCON, the FCA will give due credit if they followed corresponding provisions in the UK Corporate Governance Code and related guidance.

FCA 2018/XX
4 Specific guidance on individual conduct rules …
4.2 Specific guidance on senior manager conduct rules
…
4.2.16 G The following is a non-exhaustive list of examples of conduct that would be
in breach of rule SC2.
…
(8) For a senior conduct rules staff member who is responsible for the compliance function, failing to ensure that:
…
(e) the method of determining the remuneration complies, where applicable, with the Remuneration Code or for a Solvency II firm or a small non-directive insurer, other relevant requirements in relation to remuneration, as well as those remuneration codes applicable to firms as set out in SYSC 19B – 19E. …
4.2.28 G (1) If a senior conduct rules staff member comes across a piece of
information that is something of which they think the FCA or PRA could reasonably expect notice, they should determine whether that information falls within the scope of their responsibilities: which (for an SMF manager) is by virtue of that person’s statement of responsibilities. (a) ; or (b) (for an approved person performing a significant influence function in a Solvency II firm or a small non-directive insurer) including by reference to their scope of responsibilities document. (2) If it does, then they should ensure that, if it is otherwise appropriate to do so, it is disclosed to the appropriate regulator.

FCA 2018/XX
Annex E
Amendments to the Fit and Proper test for Approved Persons and Specified Significantharm Functions Fit and Proper test for Employees and Senior Personnel sourcebook (FIT) In this Annex, underlining indicates new text and striking through indicates deleted text. 1 General
1.1 Application and purpose
1.1.1 G FIT FIT applies to:
(1) a firm an SMCR firm (including a relevant authorised person); (2) an applicant for Part 4A permission; (3) an EEA firm, or a Treaty firm or a UCITS qualifier that wishes to establish a branch into the United Kingdom using EEA rights, or Treaty rights; or UCITS directive rights (see SUP 10A.1.10G and SUP 10A.1.11R), or apply for a top-up permission (see SUP 10A.1.13R); (4) an approved person performing an FCA controlled function; (5) a candidate for an FCA controlled function; (6) a certification employee performing an FCA specified significant-harm function; and (7) a person whom a firm an SMCR firm is proposing to certify to perform an FCA specified significant-harm function; and (8) a board director as set out in FIT 1.1.2(e).
1.1.2 G The purpose of FIT is to set out and describe the criteria that:
(1) a relevant authorised person an SMCR firm should consider when:
(a) assessing the fitness and propriety of a candidate whom the firm is proposing to put forward for approval as an FCAapproved SMF manager; (b) assessing the continuing fitness and propriety of a person approved to perform the function of an FCA-approved SMF manager, including for formulating an opinion about whether there are any grounds on which the regulator could withdraw the approval given to that individual to perform that function under section 63(2A) of the Act;

FCA 2018/XX
(c) assessing the fitness and propriety of a person whom the firm is proposing to certify to perform an FCA specified significantharm function; and (d) assessing the continuing fitness and propriety of a person whom the firm has certified to perform an FCA specified significant-harm function; and (e) (in the case an FCA-authorised person that is not a limited scope core SMCR firm) assessing the fitness of a non-SMF board director subject to competence requirements under the competent employees rule, any directly applicable EU legislation or any other requirement of the regulatory system. (2) the FCA will consider when assessing the fitness and propriety of a candidate for a controlled function, including a designated senior management function (see generally SUP 10A and SUP 10C on approved persons), and may consider when assessing the continuing fitness and propriety of approved persons.
1.1.3 G The table in FIT 1.1.4G summarises the situations to which FIT applies.
[deleted]
1.1.4 G Table: Situations to which FIT applies [deleted]
What FIT applies to
Does it apply to relevant authorised persons?
Does it apply to firms that are not relevant authorised persons? Comment (1) A firm assessing the fitness and propriety of a candidate whom the firm is proposing to put forward for approval Yes No However, the answer to Question 11 in SUP 10A Annex 1 (Frequently asked questions) says that the FCA’s approval process is not a substitute for the checks that a firm should be carrying out on its prospective recruits. FIT may be a useful guide to matters that a firm that is not a relevant authorised person should take into account. (2) A firm assessing the continuing fitness and propriety of an approved Yes No However, a firm should employ personnel with the skills, knowledge and expertise necessary for the discharge of the responsibilities allocated to them (SYSC 5.1). FIT may be a

FCA 2018/XX person useful guide to matters which a firm should take into account if it is not a relevant authorised person. (3) The FCA assessing the fitness and propriety of a candidate for approval as an approved person Yes Yes (4) The FCA assessing the continuing fitness and propriety of an approved person Yes Yes (5) A firm assessing the fitness and propriety of a person whom a firm is proposing to certify to perform an FCA specified significantharm function Yes No See the comment on row (2) (6) A firm assessing the continuing fitness and propriety of a person whom a firm has certified to perform an FCA specified significantharm function Yes No See the comment on row (2)

FCA 2018/XX
1.2 Introduction
1.2.-1 G Under section 60A(1) of the Act, before a relevant authorised person a firm may make an application for the FCA’s approval of a designated senior management function, controlled function the relevant authorised person firm must be satisfied that the person for whom the application is made is a fit and proper person to perform that function.
1.2.1 G Under section 61(1) of the Act (Determination of applications), the FCA may
grant an application for approval made under section 60 (Applications for approval) of the Act only if it is satisfied that the candidate is fit and proper to perform the controlled function to which the application relates. 1.2.1 A G Under section 63F of the Act, a relevant authorised person a firm may issue a certificate to a person to perform a specified significant-harm function only if it is satisfied that the person is a fit and proper person to perform that function. 1.2.1 B G Under sections 60A and 63F 7of the Act, in assessing whether a person is a fit and proper person to perform an FCA designated senior management function or an FCA specified significant-harm function, a relevant authorised person a firm must have particular regard to whether that person:
(1) has obtained a qualification; or
(2) has undergone, or is undergoing, training; or (3) possesses a level of competence; or (4) has the personal characteristics; required by general rules made by the FCA. 1.2.1 C G The key general rules relating to the criteria listed in FIT 1.2.1B 1.2.1BG include:
(1) in the case of very senior employees, SYSC 4.2 (persons who effectively direct the business) and SYSC 4.3A.3R (management body); (2) for employees personnel of firms generally, SYSC 5.1.1R (the competent employees rule); and (3) in relation to retail activities, TC 2.1.12R TC 2.1.1R (employees’ competence); and (4) for those who are employees of insurance firms, SYSC 3.1.6R. 1.2.3 A G Under section 63(1) of the Act (Withdrawal of approval), the FCA may withdraw an approval under section 59 given by the FCA or the PRA in relation to the performance by a person of a function if it considers that the person is not a fit

FCA 2018/XX and proper person to perform the function.
1.2.4 G The Act does not prescribe the matters which the FCA should take into account
when determining fitness and propriety. However, section 61(2) states that the FCA may have regard (among other things) to whether the candidate or approved person:
(1) has obtained a qualification; or
(2) has undergone, or is undergoing, training; or (3) possesses a level of competence; or (4) has the personal characteristics; required by general rules made by the FCA. 1.2.4 A G (1) Under Article 21(1)(d) of the MiFID Org Regulation and articles 34 and 35 of MiFID, the requirement to employ personnel with the knowledge, skills and expertise necessary for the discharge of the responsibilities allocated to them is reserved to the firm’s Home State. Therefore, in assessing the fitness and propriety of:
(a) a person to perform a controlled function; or (b) a certification employee; solely in relation to the MiFID business of an incoming EEA firm, the FCA will not have regard to that person’s competence and capability. (2) Where the function relates to:
(a) matters outside the scope of MiFID, for example activities related to a specified benchmark (see the benchmark submission function (CF 40), the benchmark administration function (CF 50) and the benchmark submission and administration FCA-specified significant-harm functions (see SYSC 5.2.33R); or (b) business outside the scope of the MiFID business of an incoming EEA firm, for example insurance mediation activities insurance distribution activities in relation to life policies; or (c) matters within the responsibility of the FCA as the Host State regulator, for example money laundering responsibilities (see the money laundering reporting function (CF11 and SMF17)) or (3) below; the FCA will have regard to a person’s competence and capability as well as their honesty, integrity, reputation and financial soundness. (3) The FCA will have regard to a natural person’s competence and capability to the extent they give a personal recommendation or

FCA 2018/XX
1.3 Assessing fitness and propriety
1.3.1 G The FCA will have regard to a number of factors when assessing the fitness
and propriety of a person to perform a particular controlled function, as more particularly described in FIT 2 (Main assessment criteria). 1.3.1A G The FCA would expect firms that are required to assess the fitness and propriety of staff being assessed under FIT to have regard to substantially the same factors as those outlined in FIT 2. 1.3.1B G In the FCA’s view, the most important considerations will be the person’s:
information about financial instruments, structured deposits, investment services or ancillary services on behalf of a UK branch of:
(a) an investment firm authorised under MiFID; (b) an AIFM investment firm carrying out activities under article6(4) of the AIFMD (provision of additional services); (c) a UCITS investment firm carrying out activities under article 6(3) of the UCITS Directive (provision of additional services); or (d) a credit institution. (4) (3) is the result of the combined effect of articles 25(1) (Assessment of suitability and appropriateness and reporting to clients) and 35(8) (Establishment of a branch) of MiFID. (5) (1) to (4) are also relevant to the matters an EEA relevant authorised person EEA SMCR firm should take into account when assessing any staff being assessed under FIT. Where, under (1) to (4):
(a) the FCA will have regard to a person’s competence and capability, so should a firm when assessing any staff being assessed under FIT; and (b) the FCA will not have regard to a person’s competence and capability, a firm need not do so either when assessing any staff being assessed under FIT. 1.2.4 B G Where the application relates to a function within a Solvency II firm and is for an FCA controlled function which is also a Solvency II Directive ‘key function’ as defined in the PRA Rulebook: Glossary, then the FCA will also have regard to the assessment made by the firm as required in article 273 of the Solvency II Regulation (EU) 2015/35 of 10 October 2014; Rules 2.1 and 2.2 of the PRA Rulebook: Solvency II Firms: Insurance - Fitness and Propriety, and other factors, as set out in EIOPA Guidelines on system of governance dated 28 January 2015 (see Guideline 16).

FCA 2018/XX
(1) honesty, integrity and reputation;
(2) competence and capability; and
(3) financial soundness.
1.3.2 G In assessing fitness and propriety, the FCA will also take account of the
activities of the firm for which the controlled function is or is to be performed, the permission held by that firm and the markets within which it operates. 1.3.2A G A relevant authorised person firm assessing the fitness and propriety of staff being assessed under FIT should consider:
(1) the nature, scale and complexity of its business, the nature and range of financial services and activities undertaken in the course of that business; and (2) whether the candidate or person has the knowledge, skills and experience to perform the specific role that the candidate or person is intended to perform. 1.3.2B G A relevant authorised person firm is reminded that, in assessing a candidate for a position within the management body of the firm, SYSC 4.3A.3R(3) requires the firm to ensure that the management body, as a collective, possesses adequate knowledge, skills and experience to understand the firm’s activities.
1.3.3 G The criteria listed in FIT 2.1 to FIT 2.3 are guidance and will be applied in
general terms when the FCA is determining a person’s fitness and propriety. It would be impossible to produce a definitive list of all the matters which would be relevant to a particular determination. A relevant authorised person firm assessing the fitness and propriety of staff being assessed under FIT should be guided by substantially the same criteria in FIT 2.1 to FIT 2.3 (to the extent applicable to the firm), recognising that this is not intended to be a definitive list of matters to be considered.
1.3.4 G If a matter comes to the FCA’s attention which suggests that the person
might not be fit and proper, the FCA will take into account how relevant and how important it is. In the same way, if a matter comes to the attention of a relevant authorised person firm which suggests that any staff being assessed under FIT might not be fit and proper, the firm should take into account how relevant and how important that matter is. 1.3.4A G A relevant authorised person firm assessing the continuing fitness and propriety of an approved person is required to notify the FCA under section 63(2A) of the Act if it forms the opinion that there are grounds on which the FCA could withdraw its approval (see SUP 10C.14.24R). In discharging its obligation to notify the FCA, a relevant authorised person firm should take into account how relevant and how important the matter is that comes to its attention which suggests an approved person might not be fit and proper

FCA 2018/XX before determining that a notification should be made. 1.3.4B G A relevant authorised person firm assessing the continuing fitness and propriety of staff being assessed under FIT should assess the role that the individual is actually performing at the time the assessment is done. For this purpose, the assessor(s) should be provided with an up-to-date job description for that individual in advance of the assessment.
1.3.5 G During the application process for a controlled function, the FCA may
discuss the assessment of the candidate’s fitness and propriety informally with the firm making the application and may retain any notes of those discussions. 2 Main assessment criteria
2.1 Honesty, integrity and reputation
2.1.1 G In determining a person’s honesty, integrity and reputation, the FCA will
have regard to all relevant matters including, but not limited to, those set out in FIT 2.1.3G which may have arisen either in the United Kingdom or elsewhere. The FCA should be informed of these matters (see SUP 10A.14.17R and SUP 10C.14.18R), but will consider the circumstances only where relevant to the requirements and standards of the regulatory system. For example, under FIT 2.1.3G(1), conviction for a criminal offence will not automatically mean an application will be rejected. The FCA treats each candidate’s application on a case-by-case basis, taking into account the seriousness of, and circumstances surrounding, the offence, the explanation offered by the convicted person, the relevance of the offence to the proposed role, the passage of time since the offence was committed and evidence of the individual’s rehabilitation. 2.1.1A G A relevant authorised person firm determining the honesty, integrity and reputation of staff being assessed under FIT, should consider all relevant matters, including those set out in FIT 2.1.3G, which may have arisen either in the United Kingdom or elsewhere. Firms should inform themselves of relevant matters, including checking for convictions for criminal offences (where possible) and contacting previous employers who have employed that candidate or person. If any staff being assessed under FIT has a conviction for a criminal offence, the firm should consider the seriousness of and circumstances surrounding the offence, the explanation offered by that person, the relevance of the offence to the proposed role, the passage of time since the offence was committed and evidence of the individual’s rehabilitation.
2.1.2 G In considering the matters in FIT 2.1.1G, the FCA will look at whether the
person’s reputation might have an adverse impact upon the firm for which the controlled function is or is to be performed and at the person’s responsibilities.

FCA 2018/XX
2.1.2A G In considering the reputation of staff being assessed under FIT 2.1.1AG a relevant authorised person firm should have regard to whether that person’s reputation might have an adverse impact upon the firm for which the function is to be performed and the person’s responsibilities.
2.1.3 G The matters referred to in FIT 2.1.1G to which the FCA will have regard,
and to which a relevant authorised person firm should also have regard, include, but are not limited to:
(1) whether the person has been convicted of any criminal offence; this must include, where provided for by the Rehabilitation Exceptions Orders to the Rehabilitation of Offenders Act 1974 or the Rehabilitation of Offenders (Northern Ireland) Order 1978 (as applicable), any spent convictions; particular consideration will be given to offences of dishonesty, fraud, financial crime or an offence under legislation relating to companies, building societies, industrial and provident societies, credit unions, friendly societies, banking, other financial services, insolvency, consumer credit companies, insurance, consumer protection, money laundering, market manipulation and insider dealing, whether or not in the United Kingdom; (2) whether the person has been the subject of any adverse finding or any settlement in civil proceedings, particularly in connection with investment or other financial business, misconduct, fraud or the formation or management of a body corporate; (3) whether the person has been the subject of, or interviewed in the course of, any existing or previous investigation or disciplinary proceedings, by the appropriate regulator, by other regulatory authorities (including a previous regulator), clearing houses and exchanges, professional bodies, or government bodies or agencies; (4) whether the person is or has been the subject of any proceedings of a disciplinary or criminal nature, or has been notified of any potential proceedings or of any investigation which might lead to those proceedings; (5) whether the person has contravened any of the requirements and standards of the regulatory system or the equivalent standards or requirements of other regulatory authorities (including a previous regulator), clearing houses and exchanges, professional bodies, or government bodies or agencies; (6) whether the person has been the subject of any justified complaint relating to regulated activities; (7) whether the person has been involved with a company, partnership or other organisation that has been refused registration, authorisation, membership or a licence to carry out a trade, business or profession, or has had that registration, authorisation, membership or licence

FCA 2018/XX revoked, withdrawn or terminated, or has been expelled by a regulatory or government body; (8) whether, as a result of the removal of the relevant licence, registration or other authority, the person has been refused the right to carry on a trade, business or profession requiring a licence, registration or other authority; (9) whether the person has been a director, partner, or concerned in the management, of a business that has gone into insolvency, liquidation or administration while the person has been connected with that organisation or within one year of that connection; (10) whether the person, or any business with which the person has been involved, has been investigated, disciplined, censured or suspended or criticised by a regulatory or professional body, a court or Tribunal, whether publicly or privately; (11) whether the person has been dismissed, or asked to resign and resigned, from employment or from a position of trust, fiduciary appointment or similar; (12) whether the person has ever been disqualified from acting as a director or disqualified from acting in any managerial capacity; (13) whether, in the past, the person has been candid and truthful in all his their dealings with any regulatory body and whether the person demonstrates a readiness and willingness to comply with the requirements and standards of the regulatory system and with other legal, regulatory and professional requirements and standards.
2.2 Competence and capability
2.2.1 G In determining a person’s competence and capability, the FCA, in
accordance with FIT 1.1.2G, will have regard to all relevant matters including but not limited to:
(1) whether the person satisfies the relevant FCA training and competence requirements in relation to the controlled function the person performs or is intended to perform; (2) whether the person has demonstrated by experience and training that they are suitable, or will be suitable if approved, to perform the controlled function; (3) whether the person has adequate time to perform the controlled function and meet the responsibilities associated with that function. 2.2.1A G In determining a person’s competence and capability to perform an FCA designated senior management function or an FCA-specified significant-

FCA 2018/XX harm function, a relevant authorised person firm, in accordance with FIT 1.1.2G, should have regard to all relevant matters including but not limited to:
(1) whether the person satisfies any applicable training and competence requirements (in relation to the function that the person performs or is intended to perform); (2) whether the person has demonstrated by experience and training that they are suitable to perform the function they are intended to perform; (3) whether the person has adequate time to perform the function in question and meet the responsibilities associated with that function.
2.2.2 G A person may have been convicted of, or dismissed or suspended from
employment for, drug or alcohol abuses or other abusive acts. This will be considered by the FCA only in relation to a person’s continuing ability to perform the particular controlled function for which the person is or is to be employed. 2.2.2A G The FCA would expect a relevant authorised person firm determining the competence and capability of staff being assessed under FIT to consider convictions, dismissals and suspensions from employment for drug or alcohol abuses or other abusive acts only in relation to a person’s continuing ability to perform the particular FCA designated senior management function or an FCA-specified significant-harm function for which the person is, or is to be, employed.
2.3 Financial soundness
2.3.1 G In determining a person’s financial soundness, the FCA will have regard,
and a relevant authorised person firm should also have regard, to any factors including, but not limited to:
(1) whether the person has been the subject of any judgment debt or award, in the United Kingdom or elsewhere, that remains outstanding or was not satisfied within a reasonable period; (2) whether, in the United Kingdom or elsewhere, the person has made any arrangements with his their creditors, filed for bankruptcy, had a bankruptcy petition served on him them, been adjudged bankrupt, been the subject of a bankruptcy restrictions order (including an interim bankruptcy restrictions order), offered a bankruptcy restrictions undertaking, had assets sequestrated, or been involved in proceedings relating to any of these.
2.3.2 G The FCA will not normally require a candidate to supply a statement of
assets or liabilities. The fact that a person may be of limited financial means

FCA 2018/XX will not, in itself, affect their suitability to perform a controlled function. The FCA would expect a relevant authorised person firm to take a similar view in assessing whether staff being assessed under FIT, are fit and proper.

FCA 2018/XX
[Editor’s note: For this Consultation Paper: provisions about the type of forms to be used, significant influence functions, appointed representatives or chapter 10A of the Supervision manual may be amended in the second consultation.]
Annex F
Amendments to the Supervision manual (SUP) In this Annex, underlining indicates new text and striking through indicates deleted text.
Chapter 10A is revoked.
[Editor’s note: The second Consultation Paper will consider whether chapter 10A is to be retained for some purposes] 10C FCA senior management managers regime for approved persons in relevant authorised persons SMCR firms 10C.1 Application General 10C.1.1 R This chapter applies to every relevant authorised person SMCR firm. 10C.1.2 G This chapter is also relevant to FCA-approved SMF managers of a relevant authorised person an SMCR firm. 10C.1.2A G SUP 10C Annex 1 (What functions apply to what type of firm) sets out:
(1) how this chapter applies to different types of SMCR firm; and (2) the SMCR firms to which this chapter does not apply. Non-UK relevant authorised persons firms: UK services 10C.1.3 R This chapter does not apply to a non-UK relevant authorised person SMCR firm in relation to regulated activities which are carried on in the United Kingdom, other than in relation to an establishment maintained by it or its appointed representative in the United Kingdom. EEA relevant authorised persons firms: general application 10C.1.4 R This chapter does not apply to an EEA relevant authorised person SMCR firm if and in so far as the question of whether a person is fit and proper to perform a particular function in relation to that firm is reserved to an authority in a country or territory outside the United Kingdom under:

FCA 2018/XX
(1) the Single Market Directives;
(2) the Treaty;
(3) the auction regulation.
10C.1.5 G (1) SUP 10C.1.4R reflects the provisions of section 59(8) of the Act and, where relevant, the Treaty. (2) It preserves the principle of Home State prudential regulation. (3) For an EEA relevant authorised person SMCR firm, the effect is to reserve to the Home State regulator the assessment of fitness and propriety of a person performing a function in the exercise of an EEA right. A member of the governing body, or the notified UK branch manager, of an EEA relevant authorised person SMCR firm, acting in that capacity, will not, therefore, have to be approved by the FCA under the Act. (3A) For example, persons in Solvency II firms which are incoming EEA firms are not expected to be carrying out FCA functions to the extent that the person will be regarded as effectively running the firm or responsible for a Solvency II Directive ‘key function’. (4) Aside from (1) to (3) (3A) an EEA relevant authorised person SMCR firm should have:
(a) considered the impact of the Host State rules with which it is required to comply when carrying on a passported activity or a Treaty activity through a branch in the United Kingdom; (b) been notified of those provisions under Part II of
Schedule 3 to the Act in the course of satisfying the
conditions for authorisation in the United Kingdom; and (c) considered, for example, the position of a branch manager based in the United Kingdom who may also be performing a function in relation to the carrying on of a regulated activity not covered by the EEA right of the firm. In so far as the function is within the description of an FCA controlled function, the firm will need to seek approval for that person to perform that FCA controlled function. Overseas firms: general 10C.1.5A G (1) Generally, where an overseas manager of a non-UK relevant authorised person SMCR firm has responsibilities in relation to its branch in the United Kingdom that are strategic only, they

FCA 2018/XX will not need to be an FCA-approved SMF manager. (2) However, where an overseas manager is responsible for implementing that strategy for its branch in the United Kingdom, and has not delegated that responsibility to an SMF manager in the United Kingdom, they will potentially be performing an FCA controlled function if the detailed conditions in this chapter defining the relevant FCA controlled function are met. UK firm with overseas branches or providing services on a cross-border basis 10C.1.6 G There are no territorial limitations to SUP 10C for:
(1) overseas branches of UK firms; or
(2) UK firms providing services into or out of the United Kingdom on a cross-border basis. Appointed representatives 10C.1.7 R This chapter does not deal with an approved person who is approved under SUP 10A.1.16BR (Appointed representatives). 10C.1.8 G (1) SUP 10A.1.15R to SUP 10A.1.16DG (Appointed representatives) deal with the approved persons regime for appointed representatives of relevant authorised persons. (2) In general this chapter does not apply to appointed representatives of relevant authorised persons. SUP 10A applies instead. (3) In theory, a person employed by an appointed representative of a relevant authorised person could come within one of the controlled functions in this chapter. If so, that person will be performing a senior management function and this chapter would apply. However, the FCA thinks that such a situation should rarely, if ever, arise. (4) If a person is an approved person under this chapter and under SUP 10A for the same firm, this chapter applies to FCAdesignated senior management functions under this chapter and SUP 10A applies to controlled functions under SUP 10A. It is unlikely that such a scenario would ever arise in practice. [Editor’s note: SUP 10C.1.7R and SUP 10C.1.8G will be reviewed in a second Consultation Paper] Insolvency practitioners 10C.1.9 R This chapter does not apply to a function performed by a person acting

FCA 2018/XX as:
(1) an insolvency practitioner within the meaning of section 388 of the Insolvency Act 1986; (2) a nominee in relation to a voluntary arrangement under Parts I (Company Voluntary Arrangements) and VIII (Individual Voluntary Arrangements) of the Insolvency Act 1986; (3) an insolvency practitioner within the meaning of article 3 of the Insolvency (Northern Ireland) Order 1989; or (4) a nominee in relation to a voluntary arrangement under Parts II (Company Voluntary Arrangements) and VIII (Individual Voluntary Arrangements) of the Insolvency (Northern Ireland) Order 1989. Swiss general insurers 10C.1.10 R For Swiss general insurers, references in this chapter to parts of the PRA Rulebook for ‘Solvency II firms’ are to be read as references to the corresponding parts of the PRA Rulebook applying to large non directive insurers. 10C.1.11 G Swiss general insurers are in the large non directive insurers sector of the PRA Rulebook and the PRA applies to them, in relation to their controlled functions, provisions equivalent to those applying to third country branches in the Solvency II firms sector of the PRA Rulebook. The FCA includes them as third country undertakings of Solvency II firms and so they must follow the requirements for Solvency II firms set out in this chapter. Insurance and mortgage credit mediation 10C.1.12 G See MIPRU 2.2 (Allocation of the responsibility for insurance distribution activity or MCD credit intermediation activity) for how the FCA’s senior managers regime for SMCR firms is adjusted for a firm carrying on insurance distribution activity or MCD credit intermediation activity. 10C.2 Purpose 10C.2.1 G The purpose of SUP 10C is:
(1) to specify, under section 59 of the Act, descriptions of the FCAdesignated senior management functions for relevant authorised persons SMCR firms, which are listed in SUP 10C.4.3R; and

FCA 2018/XX
(2) to specify the manner in which a firm must apply for the FCA's approval under section 59 of the Act and other procedures for FCA-approved SMF managers. ; and (3) describe the FCA’s senior management managers regime for SMF managers in relevant authorised persons. 10C.2.2 G SUP 10C does not deal with the PRA’s senior management regime for relevant authorised persons. The key parts of its regime can be found in the parts of the PRA’s rulebook called Senior Management Functions’ and ‘Allocation of Responsibilities’. [deleted] 10C.2.3 G (1) The FCA has certain powers in relation to PRA-approved persons, such as the requirement for FCA consent to the PRA granting approval for the performance of a PRA controlled function. SUP 10C does not deal with these. (2) However, SUP 10C.12.1G has material about the FCA’s policy on giving its consent to applications made to the PRA about conditional and time-limited approvals for SMF managers in PRA-authorised persons. 10C.2.4 G SUP 10C.14 (Changes to an approved person’s details) applies, in certain cases, to PRA-approved persons. Where this is the case, it says so. 10C.3 General material about the definition of controlled functions Purpose 10C.3.1 G This section has general provisions that apply to the definition of all controlled functions. Types of controlled function 10C.3.2 G There are two types of FCA controlled function under the Act:
(1) an FCA-designated senior management function; and (2) an FCA controlled function that is not a designated senior management function. 10C.3.3 G All the controlled functions that the FCA has specified in this chapter are designated senior management functions. The FCA has not, in this
chapter, used its power to specify controlled functions that are not
designated senior management functions.
10C.3.4 G The FCA has (in SUP 10A) specified controlled functions for relevant authorised persons that are not designated senior management functions. (See SUP 10C.1.7R to SUP 10C.1.8G (Appointed

FCA 2018/XX representatives)).
[Editor’s note: This provision will be reviewed in a second Consultation Paper] 10C.3.5 G (1) Except as described in SUP 10C.3.4G, in this chapter, FCA controlled function and FCA-designated senior management function cover the same functions. (2) Therefore, a function is only covered by SUP 10C.4.3R (Table of FCA-designated senior management functions for relevant authorised persons) if that function meets both the following sets of requirements:
(a) the requirements of SUP 10C.3.6R (Definition of FCA controlled function: arrangements); and (b) the requirements of SUP 10C.3.10R (Definition of FCA-designated senior management function). Definition of FCA controlled function: arrangements 10C.3.6 R In accordance with section 59 of the Act (Approval for particular arrangements), a function specified in this chapter is an FCA controlled function only to the extent that it is performed under an arrangement entered into by:
(1) a firm; or
(2) a contractor of the firm; in relation to the carrying on by the firm of a regulated activity. 10C.3.7 G Section 59(1) and (2) of the Act provide that approval is necessary for an FCA controlled function which is performed under an arrangement entered into by a firm, or its contractor (typically an appointed representative), in relation to a regulated activity. 10C.3.8 G (1) Arrangement is defined in section 59(10) of the Act as any kind of arrangement for the performance of a function which is entered into by a firm or any of its contractors with another person. (2) Arrangement includes the appointment of a person to an office, a person becoming a partner, or a person’s employment (whether under a contract of service or otherwise). (3) An arrangement need not be a written contract but could arise by conduct, custom and practice. 10C.3.9 G If a firm is a member of a group, a person employed elsewhere in the group (for example, by the holding company) who carries out a

FCA 2018/XX function in relation to the firm will only perform an FCA controlled function:
(1) if the function is performed under an arrangement entered into by the firm (under section 59(1)); or (2) if:
(a) there is a contract (under section 59(2)) between the firm and the relevant group member permitting this; and (b) the function is performed under an arrangement entered into by the contractor. Definition of FCA-designated senior management function 10C.3.10 R Each FCA-designated senior management function is one which comes within the definition of a senior management function. 10C.3.11 G Section 59ZA(2) of the Act says that a function is a ‘senior management function’, in relation to the carrying on of a regulated activity by a firm, if:
(1) the function will require the person performing it to be responsible for managing one or more aspects of the firm’s affairs, so far as relating to the activity; and (2) those aspects involve, or might involve, a risk of serious consequences:
(a) for the firm; or
(b) for business or other interests in the United Kingdom.
10C.3.12 G Section 59ZA(3) of the Act says that ‘managing’ includes, for these purposes, taking decisions, or participating in the taking of decisions, about how one or more aspects of the firm’s affairs should be carried on. The 12-week rule 10C.3.13 R If:
(1) a firm appoints an individual to perform a function which, but for this rule, would be an FCA-designated senior management function; (2) the appointment is to provide cover for an SMF manager whose absence is:
(a) temporary; or

FCA 2018/XX
(b) reasonably unforeseen; and
(3) the appointment is for less than 12 weeks in a consecutive 12- month period; the description of the relevant FCA-designated senior management function does not relate to those activities of that individual. 10C.3.14 G SUP 10C.3.13R enables cover to be given for (as an example) holidays and emergencies and avoids the need for the precautionary approval of, for example, a deputy. However, as soon as it becomes apparent that a person will be performing an FCA-designated senior management function for more than 12 weeks, the firm should apply for approval. 10C.3.15 G See SUP 10C.12.7G to SUP 10C.12.14G (time-limited approvals) for procedures for temporary appointments longer than 12 weeks. 10C.3.16 G (1) A firm to which SYSC 26 (Senior managers and certification regime: Overall and local responsibility) applies may have allocated responsibilities under that chapter to an SMF manager who is absent under SUP 10C.3.13R. (2) SYSC 26.4.8R (Exclusion where the 12-week rule applies) deals with how those responsibilities may be reallocated during the SMF manager’s absence. (3) SYSC 26.4.10G explains that SYSC 26.4.8R and SUP 10C.3.13R apply to a person performing the other overall responsibility function or the other local responsibility function as well as to other designated senior management functions. 10C.3.17 G (1) If:
(a) a firm allocates any FCA-prescribed senior management responsibilities to an SMF manager; and (b) the SMF manager later becomes absent; the firm should reallocate them to another SMF manager. (2) The firm may not allocate the absent manager’s FCA-prescribed senior management responsibilities to the person providing cover for that manager unless the person providing cover is also an SMF manager of the firm. 10C.4 Specification of functions 10C.4.1 R (1) Each function described in SUP 10C.4.3R is an FCA controlled function.

FCA 2018/XX
(2) In accordance with section 59(6A) of the Act (Approval for particular arrangements), the FCA designates each function in (1) as a senior management function. 10C.4.2 R (1) Part 1 of the table in SUP 10C.4.3R applies to UK relevant authorised persons. (2) Part 2 of the table in SUP 10C.4.3R applies to EEA relevant authorised persons. (3) Part 3 of the table in SUP 10C.4.3R applies to third-country relevant authorised persons. [deleted] 10C.4.2A R SUP 10C Annex 1 (What functions apply to what type of firm) sets out which of the functions in SUP 10C.4.3R apply to which kind of firm. 10C.4.3 R Table of FCA-designated senior management functions for relevant authorised persons SMCR firms The first column (Type) of the following table is amended by (a) amalgamating its rows so that “FCA governing functions” and “FCA required functions” apply to the functions in columns two and three as follows and then (b) amending the table further as shown.
Part One: (FCA-designated senior management functions for
relevant authorised persons)
Type SMF Description of FCA controlled function FCA governing functions SMF 1 Chief executive function SMF 3 Executive Executive director function SMF 7 Group entity senior manager function SMF 9 Chairman function SMF 10 Chairman of the risk committee function SMF 11 Chairman of the audit committee function SMF 12 Chairman of the remuneration committee function SMF 13 Chair Chairman of the nomination committee function SMF 14 Senior independent director function

FCA 2018/XX
SMF 15 Chairman of the with-profits committee function SMF 19 Head of third country branch function SMF 27 Partner function FCA required functions SMF 16 Compliance oversight function SMF 17 Money laundering reporting function SMF 18 Other overall responsibility function
Part Two: (FCA-designated senior management functions for EEA
relevant authorised persons)
Type SMF Description of FCA controlled function FCA required functions SMF 17 Money laundering reporting function SMF 21 EEA branch senior manager function SMF 29 Limited scope function SMF 23b Conduct risk oversight (Lloyd’s) function
Part Three: (FCA-designated senior management functions for
third-country relevant authorised persons) Type SMF Description of FCA controlled function FCA governing function SMF3 Executive director function FCA required functions SMF 16 Compliance oversight function SMF 17 Money laundering reporting function SMF22 Other local responsibility function Systems and controls functions SMF 2 Chief finance officer function SMF 4 Chief risk officer function SMF 5 Head of internal audit function SMF 24 Chief operations function

FCA 2018/XX
10C.4.4 G [As described in SUP 10C.1.7R to SUP 10C.1.8G (Appointed representatives), SUP 10A specifies certain other controlled functions for relevant authorised persons.] [Editor’s note: This provision will be reviewed in a second Consultation Paper] 10C.4A FCA governing functions: General Sole traders 10C.4A.1 G (1) An individual sole trader themselves will not need approval to perform any of the governing functions. Therefore the governing functions do not apply to a sole trader with no employees. (2) It is possible, although perhaps not likely in practice, that the governing functions could apply to staff working for the sole trader. (3) In particular, it is possible for the sole trader to give sufficient authority to a staff member that the staff member meets the Glossary definition of a director. (4) This might happen, for example, if the sole trader’s business is so large that the sole trader sets up a governing body to run it. PRA-authorised persons 10C.4A.2 G SUP 10C.9 (Minimising overlap with the PRA approved persons regime) explains that in many cases a person performing one the functions set out in SUP 10C.5 to SUP 10C.5B for a PRA-authorised person will not in fact require approval from the FCA to perform the function and will just require PRA approval. 10C.5 FCA governing functions: Executive Executive director function (SMF3): General 10C.5.1 R (1) For a UK relevant authorised person SMCR firm, the executive executive director function is the function of acting in the capacity of a director (other than a non-executive director) of the firm. (2) For a third-country relevant authorised person non-UK SMCR firm, the executive executive director function is the function of acting in the capacity of a director (other than a non-executive director) in relation to its branch in the United Kingdom where

FCA 2018/XX the person performing that function has responsibility for managing one or more aspects of the firm’s affairs so far as relating to the activities of the branch. (3) Paragraph (2) includes a person who is a member (other than a non-executive member) of the branch’s governing body. (4) The executive director function does not apply to a UK SMCR firm that is:
(a) a partnership; or
(b) a limited liability partnership.
Chairman of the nomination committee function (SMF13) 10C.5.2 R [deleted] [Editor’s note: The text of this provision has been moved to SUP 10C.5A.2R] 10C.5.3 G [deleted] [Editor’s note: The text of this provision has been moved to SUP 10C.5A.3G] 10C.5.4 G [deleted] [Editor’s note: The text of this provision has been moved to SUP 10C.5A.4G] 10C.5.5 G In some firms, the chairman of the nomination committee is also the chairman of the governing body. As being chairman of the governing body is a PRA controlled function, the chairman may not need approval to perform the chair of the nomination committee function but instead just need PRA approval for being chairman of the governing body. [deleted] (See SUP 10C.9 (Minimising overlap with the PRA approved persons regime) for an explanation of when PRA approval means that FCA approval is not needed.) Non-executive directors 10C.5.6 G [deleted] [Editor’s note: The text of this provision has been moved to SUP 10C.5A.1G] Insurance mediation 10C.5.7 G See MIPRU 2.2 for how the FCA’s senior management regime for relevant authorised persons is adjusted for a firm carrying on insurance mediation activity. [deleted] Executive director function: Extension of definition for Lloyd’s 10C.5.8 R In the case of the Society, the executive director function also includes the function of acting in the capacity of an executive member of a committee to which the Council of the Society directly delegates

FCA 2018/XX authority to carry out the Society’s regulatory functions. Executive director function: Adjustment of definition for non-directive friendly societies 10C.5.9 R (1) This rule applies to a non-directive friendly society. (2) The executive director function is the function of directing the affairs of the firm, either alone or jointly with others. (3) If the principal purpose of the firm is to carry on regulated activities, each person with responsibility for directing its affairs performs the FCA controlled function. (4) If the principal purpose of the firm is other than to carry on regulated activities, a person performs the FCA controlled function only to the extent that they have responsibility for a regulated activity. (5) Each person on the firm’s governing body will be taken to have responsibility for its regulated activities, unless the firm has apportioned this responsibility to one particular person to whom it is reasonable to give this responsibility. (6) The person in (5) need not be a member of the firm’s governing body. (7) The executive director function does not include acting in the capacity of a non-executive director. (8) This rule applies in place of SUP 10C.5.1R. 10C.5.10 G (1) Typically a non-directive friendly society will appoint a “committee of management” to direct its affairs. (2) However, the governing arrangements may be informal and flexible. If this is the case, the FCA would expect the society to resolve to give responsibility for the carrying on of regulated activities to one individual who is appropriate in all the circumstances. (3) The individual in (2) may, for example, have the title of chief executive or similar. The individual would have to be an FCAapproved person under SUP 10C.5.9R. 10C.5.11 G (1) In practice, the FCA expects that most non-directive friendly societies will be PRA-authorised persons. (2) Where that is the case, the executive director function will often not apply (see SUP 10C.4A.2G). Chief executive function (SMF1)

FCA 2018/XX
10C.5.12 R The chief executive function is the function of acting in the capacity of a chief executive of a firm. 10C.5.13 G This function is having the responsibility, alone or jointly with one or more others, under the immediate authority of the governing body for the conduct of the whole of the business (or relevant activities) of the firm. 10C.5.14 G (1) A person performing the chief executive function may be a member of the governing body but need not be. (2) If the chairman of the governing body is also the chief executive, they will be discharging this function. (3) If the responsibility is divided between more than one person but not shared, there is no person exercising the chief executive function. (4) But if that responsibility is discharged jointly by more than one person, each of those persons will be performing the chief executive function. Head of third country branch function (SMF 19) 10C.5.15 R (1) This rule applies to a non-UK SMCR firm but not to an EEA SMCR firm. (2) The head of third country branch function is the function of having responsibility alone or jointly with others, for the conduct of all activities of the United Kingdom branch of a firm which are subject to the UK regulatory system. Partner function (SMF27): Partnerships and limited liability partnerships 10C.5.16 R (1) This rule applies to a UK SMCR firm that is a partnership. (2) The partner function is the function of being or occupying the position of a partner in that firm. (3) The partner function also includes:
(a) the function of being or occupying the position of a partner in that firm (by whatever name called); and (b) acting as a member of the firm’s governing body. (4) (3) applies where the Glossary definition of partner is not wide enough to cover all the functions in (3). 10C.5.17 R (1) This rule applies to a UK SMCR firm that is a limited liability partnership.

FCA 2018/XX
(2) The partner function is the function of being or acting in the capacity of:
(a) a member in that firm or a person occupying the position of a member (by whatever name called); (b) a person appointed to direct the firm’s affairs; or (c) a person in accordance with whose directions or instructions (not being advice given in a professional capacity) the members or directors are accustomed to act. Partner function: When partners and members do not require approval 10C.5.18 R (1) This rule applies to a firm to which the partner function applies. (2) If the principal purpose of the firm is to carry on one or more regulated activities, each person in SUP 10C.5.16R to SUP 10C.5.17R (a “partner”) performs the partner function. (3) If the principal purpose of the firm is other than to carry on regulated activities:
(a) a partner performs the partner function to the extent only that they have responsibility for a regulated activity; and (b) a partner in a firm will be taken to have responsibility for each regulated activity except where the firm has apportioned responsibility to another partner or group of partners. 10C.5.19 G (1) The effect of SUP 10C Annex 1 2.4R is that regulated activity in SUP 10C.5.18R is to be taken as not including an activity that is a non-mainstream regulated activity. (2) Therefore, a partner whose only regulated activities are incidental to their professional services, in a firm whose principal purpose is to carry on other than regulated activities, need not be an FCA-approved person. (3) What amounts to the principal purpose of the firm is a matter of fact in each case having regard to all the circumstances, including the activities of the firm as a whole. (4) Any regulated activities which such a partner carries on are not within the description of the partner function. Partner function: Limited partnerships

FCA 2018/XX
10C.5.20 R If a partnership is registered under the Limited Partnership Act 1907, the partner function does not extend to any function performed by a limited partner. Partner function: Partners without influence 10C.5.21 G (1) SUP 10C.5.16R to SUP 10C.5.20R (Partner function) are drafted to cover all partners and members. (2) However, the partner function is (as are all FCA-designated senior management functions) subject to SUP 10C.3.10R (Definition of FCA-designated senior management function). (3) The effect is that unless the function performed by the partner or member in question comes within the definition of a senior management function, the function does not come within the partner function. Thus partners or members who play no part in the management of the firm are unlikely to be performing the partner function. 10C.5A FCA governing functions: Oversight Non-executive directors 10C.5A.1 10C.5.6 G (1) As explained in SUP 10C.7.4G, the FCA does not expect a nonexecutive director ever to perform the other overall responsibility function. (2) Therefore, a non-executive director will not need to be approved to perform any FCA-designated senior management function unless they perform the chair of the nomination committee function one of the FCA-designated senior management functions set out in this section. Chairman of the nomination committee function (SMF13) 10C.5A.2 10C.5.2 R If the firm has a nomination committee, the chair chairman of the nomination committee function is the function of acting in the capacity of the chairman of that committee. 10C.5A.3 10C.5.3 G See SYSC 4.3A (CRR firms) for material about nomination committees 10C.5A.4 10C.5.4 G Please note that the chair chairman of the nomination committee function still applies if the firm is not a CRR firm. Chairman function (SMF9)

FCA 2018/XX
10C.5A.5 R The chairman function is the function of having responsibility for chairing, and overseeing the performance of the role of, the governing body of the firm. Chairman of the risk committee function (SMF10) 10C.5A.6 R The chairman of the risk committee function is the function of having responsibility for chairing, and overseeing the performance of, any committee responsible for the oversight of the risk management systems, policies and procedures of the firm, including where applicable to the firm, a committee established in accordance with the risk control requirements for SMCR firms. 10C.5A.7 G The chairman of the risk committee function applies even if the firm:
(1) is not obliged to have a committee of the type described in SUP 10C.5A.6R; or (2) is not subject to any requirements of the regulatory system dealing with risk management systems, policies and procedures. Chairman of the audit committee function (SMF11) 10C.5A.8 R The chairman of the audit committee function is the function of having responsibility for chairing, and overseeing the performance of, any committee responsible for the oversight of the internal audit system of the firm including where applicable to the firm, a committee established in accordance with the internal audit requirements for SMCR firms. 10C.5A.9 G The chairman of the audit committee function applies even if the firm:
(1) is not obliged to have a committee of the type described in SUP 10C.5A.8R; or (2) is not subject to any requirements of the regulatory system dealing with internal audit. Chairman of the remuneration committee function (SMF12) 10C.5A.10 R The chairman of the remuneration committee function is the function of having responsibility for chairing, and overseeing the performance of, any committee responsible for the oversight of the design and the implementation of the remuneration policies of a firm, including where applicable to the firm, a committee established in accordance with:
(1) SYSC 19A.3.12R (Remuneration Principle 4: Governance); (2) SYSC 19B.1.9R (AIFM Remuneration Principle 3:
Governance);
(3) SYSC 19C.3.12 R (Remuneration Principle 4: Governance);

FCA 2018/XX
(4) SYSC 19D.3.12R (Remuneration Principle 4: Governance); (5) SYSC 19E.2.9R (UCITS Remuneration Principle 3:
Governance).
10C.5A.11 G The chairman of the remuneration committee function applies even if the firm:
(1) is not obliged to have a committee of the type described in SUP 10C.5A.10R; or (2) is not subject to any requirements of the regulatory system dealing with remuneration policies. Chairman of the with-profits committee function (SMF15) 10C.5A.12 R If the firm has a with-profits committee, the chairman of the with-profits committee function is the function of acting in the capacity of a nonexecutive chairman of the committee. 10C.5A.13 R If the firm has a with-profits advisory arrangement, the chairman of the with-profits committee function is the function of being whichever of the following applies to the firm:
(1) the independent person referred to in paragraph (a) of the definition of with-profits advisory arrangement; or (2) the non-executive directors referred to in paragraph (b) of that definition. Senior independent director function (SMF14) 10C.5A.14 R The senior independent director function is the function of performing the role of a senior independent director, and having particular responsibility for leading the assessment of the performance of the person performing the chairman function. 10C.5B FCA governing functions: Group entities Group entity senior manager function (SMF7) 10C.5B.1 R (1) The group entity senior manager function is the function of having a significant influence on the management or conduct of one or more aspects of the affairs of a firm in relation to its regulated activities. (2) This controlled function does not include having such influence in the course of performance of another designated senior management function for that firm.

FCA 2018/XX
(3) This controlled function only applies if it is performed by:
(a) a person employed by; or
(b) an officer of:
any of the following:
(c) a parent undertaking or holding company of the firm; or (d) another undertaking which is a member of the firm’s group. Basis on which group entity senior manager function is included 10C.5B.2 G (1) This provision explains the basis on which the group entity senior manager function is included as a controlled function. (2) The basic position is set out in SUP 10C.3.9G. As is the case with all controlled functions, the definition of the group entity senior manager function is subject to the overriding provisions in SUP 10C.3.6R, which sets out the requirements of section 59(1) and (2) of the Act. (3) This means that unless the firm has an arrangement permitting the performance of these roles by the persons concerned, these persons will not be performing the group entity senior manager function. (4) Therefore, the FCA accepts that there will be cases in which a person performing the role described in SUP 10C.5B.1R will not require approval. (5) However where there is such an arrangement the function may apply. When the group entity senior manager function applies 10C.5B.3 G (1) Individuals in the management of a group in which a firm is a subsidiary do not automatically come within the group entity senior manager function even though their job relates to the firm. (2) The FCA does not aim or expect to approve individuals to perform this function for every firm to which the function potentially applies under SUP 10C Annex 1 (What functions apply to what type of firm) just because the firm is part of a group. (3) The FCA would not consider it to be unusual for there to be no one performing the group entity senior manager function for a

FCA 2018/XX firm that is a subsidiary in a group.
10C.5B.4 G Whether someone performs the group entity senior manager function should be assessed on a case-by-case basis. The factors to be taken into account include:
(1) the organisational structures of the group and the firm; (2) the split of key responsibilities between the group and firm boards and senior management; and (3) whether SMF managers based in the firm have an appropriate level of authority within the group to ensure that the firm complies with the requirements of the regulatory system. 10C.5B.5 G (1) An individual based elsewhere in a group whose responsibilities in relation to a subsidiary in the group that is a firm are limited to developing the group’s overall strategy is unlikely to be performing the group entity senior manager function. (2) The function is more likely to apply to individuals who are directly responsible for implementing the group’s strategy in the firm. (3) Therefore, if an individual based elsewhere in the group:
(a) is directly responsible for taking decisions about how the firm should conduct its regulated activities; and (b) has not delegated this responsibility to an SMF manager based in the firm; it is likely that they will require approval to perform the group entity senior manager function (or, as described in SUP 10C.5B.6G, another designated senior management function). (4) If however the firm’s governing body has sufficient discretion in how it applies and responds to proposals coming from group committees or individuals based in parent entities, approval would generally not be required. In this case the individual will be carrying on a group-level function rather than performing a function on behalf of the firm. (5) So, where:
(a) a firm has in place the required SMF managers based in the firm; and (b) those SMF managers are effective and have sufficient control over the firm; the FCA would not routinely expect the firm to have persons

FCA 2018/XX performing the group entity senior manager function in place. 10C.5B.6 G (1) SUP 10C.5B.1R(2) means that an individual who is approved to perform another designated senior management function for a firm will often not need to be approved to perform the group entity senior manager function for that firm as well. (2) So for example if the individual has responsibility for the firm’s finances they may be performing the chief finance officer function. If that is the case the individual will not be performing the group entity senior manager function. (3) Similarly an individual who is approved to perform another designated senior management function for the firm may have influence that comes from holding that post in matters falling outside the core duties of that post. For example a chief finance officer of a firm will have important input into decisions that fall outside the core financial control function. That influence does not mean that they are performing the group entity senior manager function. 10C.5B.7 G The group entity senior manager function is potentially relevant:
(1) whether the individual is located in or outside the United Kingdom; and (2) whether the group is headquartered in the United Kingdom or overseas. 10C.5B.8 G (1) The parent of a subsidiary firm cannot itself perform the group entity senior manager function. (2) A shareholder in the parent will also not perform this function unless the shareholder is also a director, officer or employee of the parent and is exerting significant influence over the firm through that role. 10C.6 FCA-required functions Compliance oversight function (SMF16) 10C.6.1 R The compliance oversight function is the function of acting in the capacity of a director or senior manager person who is allocated the function in:
(1) SYSC 6.1.4R(2); or
(2) article 22(3) of the MiFID Org Regulation; or (3) article 22(3) of the MiFID Org Regulation (as applied in

FCA 2018/XX accordance with SYSC 1 Annex 1 2.8AR, SYSC 1 Annex 1 3.2- AR, SYSC 1 Annex 1 3.2-BR, SYSC 1 Annex 1 3.2CR and SYSC 1 Annex 1 3.3R); (4) SYSC 6.1.4CR; (5) SYSC 3.2.8R; or (6) (for a full-scope UK AIFM) article 61(3)(b) of the AIFMD level 2 regulation. Money laundering reporting function (SMF17) 10C.6.2 R The money laundering reporting function is the function of acting in the capacity of the money laundering reporting officer of a firm. 10C.6.3 G A firm’s obligations in respect of its money laundering reporting officer are set out elsewhere in the Handbook (see SYSC 6.3.9R and, for their scope, see the application provisions in SYSC 1 Annex 1). [deleted] Limited scope function (SMF29) [Editor’s note: This function is the renamed apportionment and oversight function. The consequential changes to the Handbook required by this renaming will be dealt with in a second Consultation Paper.] 10C.6.4 R The limited scope function is the function of acting in the capacity of a person responsible for the apportionment function and/or the oversight function set out in SYSC 4.4.5R. 10C.6.5 G The fact that there is a person performing the limited scope function, and who has responsibility for activities subject to regulation by the FCA, may have a bearing on whether a manager who is based overseas will be performing an FCA controlled function. It is a factor to take into account when assessing the likely influence of the overseas manager. Conduct risk oversight (Lloyd’s) function (SMF23b) 10C.6.6 R The conduct risk oversight (Lloyd’s) function is the function of acting in the capacity of a person who is allocated the function in SYSC 3.2.9AR. 10C.6A Systems and controls functions: Finance, risk and internal audit Introduction 10C.6A.1 G The FCA-designated senior management functions in this section apply even if the firm:
(1) is not required by the regulatory system to allocate any of these

FCA 2018/XX roles to someone; or
(2) is not subject to any requirements of the regulatory system dealing with the management of the matters referred to in SUP 10C.6A.3R to SUP 10C.6A.6R. Seniority 10C.6A.2 G The FCA expects a firm to ensure that a person performing a function in this section for a firm has sufficient expertise and authority to perform that function effectively. A director or senior manager would meet this expectation. Chief finance officer function (SMF2) 10C.6A.3 R The chief finance officer function is the function of having responsibility for management of the financial resources of the firm, including reporting directly to the governing body of the firm in relation to its financial affairs. Chief risk officer function (SMF4) 10C.6A.4 R The chief risk officer function is the function of having responsibility for overall management of the risk controls of a firm, including:
(1) the setting and managing of the firm’s risk exposures; and (2) reporting directly to the governing body of the firm in relation to its risk management arrangements. 10A.6A.5 G (1) Risk controls systems include ones designed to deal with the kinds of matters in the risk control requirements for SMCR firms. (2) However SUP 10C.6A.4R applies even if the provisions in (1) do not apply to the firm. Head of internal audit function (SMF5) 10C.6A.6 R The head of internal audit function is the function of having responsibility for management of the internal audit function of the firm, including reporting directly to the governing body of the firm on the internal audit function. 10A.6A.7 G (1) Internal audit covers the kinds of matters in the internal audit requirements for SMCR firms. (2) However SUP 10C.6A.6R applies even if the provisions in (1) do not apply to the firm.

FCA 2018/XX
10C.6B Systems and controls functions: Other The chief operations function (SMF24) 10C.6B.1 R The chief operations function is the function of having overall responsibility for managing all or substantially all the internal operations or technology of the firm or of a part of the firm. 10C.6B.2 G (1) In SUP 10C.6B.1R technology refers principally to the firm’s information and communications technology (ICT) systems and services. (2) Those services include but may not be necessarily limited to the mechanisms and networks that support the operations of a firm, including data entry, data storage, data processing and reporting services, but also monitoring, business and decision support services. 10C.6B.3 G The table in SUP 10C.6B.4G gives examples of how the chief operations function applies. 10C.6B.4 G Table: Examples of how the chief operations function applies Example Comments (1) Firm A has the following three individuals.

Chief Operating Officer
(COO);
Chief Information &
Technology Officer (CITO);
Head of Human Resources
(Head of HR).
The Head of HR and the
CITO report to the COO.
The COO is the only person performing the chief operations function. (2) Firm A has the following two individuals:
Chief Operating Officer
(COO);
Chief Information and
Technology Officer (CITO).
The COO and CITO are equally senior. Both have separate reporting lines to the Board and the CEO. Both individuals perform the chief operations function.

FCA 2018/XX
Overall responsibility for information technology is shared between the COO and CITO. The COO has overall responsibility for all other internal operations. (3) Firm A has two business lines (broking and advice). It has the following three individuals:

a Chief Operating Officer
responsible for the internal operations of the broking business (other than technology)
a Chief Information and
Technology Officer for the broking business
an individual who combines
the roles of Chief Operating
Officer and Chief Information and Technology Officer for the advice business. The individuals are equally senior. All three individuals perform the chief operations function. (4) Firm A splits overall responsibility for its internal operations between various individuals. A separate individual is responsible for human resources, business continuity, procurement and outsourcing, buildings and the remaining parts of internal operations. Firm A also has a Chief Information & Technology Officer (CITO) with responsibility for all the firm’s technology. Each individual is equally senior. The CITO performs the chief operations function. None of the others perform the chief operations function. This is because none of them has responsibility for the firm’s internal operations as a whole or for all the internal operations of a part of the business. Firm A has divided the responsibility based on function rather than business line. However those others may be performing the other overall responsibility function. Seniority

FCA 2018/XX
10C.6B.5 G The FCA expects a firm to ensure that a person performing a function in this section for a firm has sufficient expertise and authority to perform that function effectively. A director or senior manager would meet this expectation. 10C.7 Other overall responsibility function (SMF18) Application 10C.7.1-2 R This section applies to a firm:
(1) to which SYSC 26 (Senior managers and certification regime:
Overall and local responsibility) applies; and (2) that is a UK SMCR firm. 10C.7.1-1 G The effect of SUP 10C.7.1-2R is that this section only applies to one of the following types of UK SMCR firm:
(1) an SMCR dual regulated banking sector firm; (2) an enhanced scope SMCR firm; and (3) a Solvency II firm (including a large non-directive insurer) but excluding an insurance special purpose vehicle and certain firms in run-off. Definition 10C.7.1 R A person performs the other overall responsibility function in relation to a firm if that person:
(1) is performing:
(a) a function allocated to that person under SYSC 4.7.8R (Allocation of overall responsibility for a firm’s activities, business areas and management functions) SYSC 26.3.1R (Main rules) in relation to the firm; or (b) FCA-prescribed senior management responsibility number (11) (z) in the table in SYSC 24.2.5R (functions in relation to CASS) allocated to that person under SYSC 4.7.5R (Allocation of FCA-prescribed senior management responsibilities) SYSC 24.2 (Allocation of FCA-prescribed senior management responsibilities:
Main allocation rules); and or
(c) (if the firm has allocated such a function to someone) the function of having overall responsibility for any of the activities, business areas and management functions

FCA 2018/XX of the firm excluded from SYSC 26.3 (Main rules) by SYSC 26.4.11R (Exclusion for AIFMD); and (2) does not have an approval to perform any other designated senior management function in relation to the firm. Other The other overall responsibility function does not apply if approved for another function 10C.7.2 G The table in SUP 10C.7.3G gives examples of how SUP 10C.7.1R(2) works. 10C.7.3 G Table: Examples of how the other overall responsibility function applies Example Comments (1) ‘A’ is appointed to perform the executive executive director function and to perform a potential other overall responsibility function for the same firm. A only needs approval to perform the executive executive director function. (2) ‘A’ is approved to perform the other overall responsibility function. Later, A is appointed to perform the executive executive director function for the same firm. A requires approval for the other overall responsibility function when A is first appointed. When A is later approved to perform the executive executive director function, A stops performing the other overall responsibility function. The firm should use Form E to apply for approval for A to perform the executive executive director function and to notify the FCA that A is no longer performing the other overall responsibility function. (3) ‘A’ is appointed to perform the PRA's Head of Key Business Area designated senior management function for Firm X and to perform a potential other overall responsibility function for the same firm. Firm X is an SMCR dual regulated banking sector firm. A only needs approval to perform the PRA’s Head of Key Business Area designated senior management function. It does not make any difference whether the potential other overall responsibility function that A performs is connected to the PRA’s Head of Key Business Area designated senior management function.

FCA 2018/XX
(4) ‘A’ is approved to perform the other overall responsibility function for Firm X. Firm X is an SMCR dual regulated banking sector firm. Later, A is appointed to perform the PRA's Head of Key Business Area designated senior management function for the same firm. A requires approval for the other overall responsibility function when A is first appointed. When A is later approved to perform the PRA’s Head of Key Business Area designated senior management function, A stops performing the other overall responsibility function. (5) ‘A’ is appointed to perform:
(a) the compliance oversight function for one firm (Firm X) in a group (which may or may not be a relevant authorised person); and (b) a function coming within the scope of the other overall responsibility function for another firm (which is a relevant authorised person) in the same group (Firm Y). A needs approval to perform the compliance oversight function for Firm X and the other overall responsibility function for Firm Y. (6) ‘A’ is appointed to be head of sales for Firm X and to report directly to the firm’s governing body about this. This function also comes within the PRA’s Head of Key Business Area designated senior management function. Firm X is an SMCR dual regulated banking sector firm. A only needs approval to perform the PRA’s Head of Key Business Area designated senior management function. (7) ‘A’ is appointed to take on some functions that come within the other overall responsibility function. Later, A is appointed as chief risk officer. The firm is one of those for which being chief risk officer is a PRA-designated senior management function or an FCA-designated senior On A’s first appointment, A will need to be approved to perform the other overall responsibility function. On being appointed as chief risk officer, the answer for example (4) applies because being chief risk officer is a PRA-designated senior management function. A will stop performing the other overall responsibility function.

FCA 2018/XX management function.
(8) ‘A’ is appointed to a role for Firm X that comes within the other overall responsibility function. Firm X is an SMCR dual regulated banking sector firm. Later, the firm reorganises and A’s role comes within the PRA’s Head of Key Business Area designated senior management function. A’s role does not otherwise change. The answer for example (7) applies. On A’s first appointment, A will need to be approved to perform the other overall responsibility function. When A is later approved to perform the PRA’s Head of Key Business Area designated senior management function, A stops performing the other overall responsibility function. (9) ‘A’ is appointed to a role for Firm X that comes within the PRA’s Head of Key Business Area designated senior management function. It is also a potential other overall responsibility function. Firm X is an SMCR dual regulated banking sector firm. Later, the firm reorganises—A’s role stays the same but now it falls outside the PRA’s Head of Key Business Area designated senior management function. On A’s first appointment, A only needs approval to perform the PRA’s Head of Key Business Area designated senior management function. Following the reorganisation, the firm has three months to get approval for A to perform the other overall responsibility function. This three-month period applies because the relevant PRA rules keep the PRA’s Head of Key Business Area designated senior management function in place, which means that the other overall responsibility function does not apply during that period. The relevant PRA rules can be found in
Chapter 2 of the part of the PRA
rulebook Rulebook titled ‘Senior
Management Functions’.
(10) ‘A’ is appointed to a role for Firm X that comes within the PRA’s Head of Key Business Area designated senior management function. A also performs a potential other overall responsibility function. Firm X is an SMCR dual regulated banking sector firm. Later, A gives up the PRA role but carries on with the potential other overall responsibility function. The answer to example (9) applies. (11) ‘A’ is appointed as an On A’s first appointment, A will need

FCA 2018/XX executive director. A then resigns and takes up a job with the same firm coming within the other overall responsibility function. to be approved to perform the executive executive director function. A will need to get approval to perform the other overall responsibility function before A gives up being a director takes up their new responsibilities. Note (1): A potential other overall responsibility function means a function that would have come within the other overall responsibility function but is excluded by SUP 10C.7.1R(2). Note (2): A potential other overall responsibility function should be recorded in A’s statement of responsibilities and in the firm’s management responsibilities map. Non-executive directors 10C.7.4 G For the reasons described in SYSC 4.7.18G SYSC 26.4.5G, the FCA does not expect that a non-executive director will ever perform the other overall responsibility function. 10C.8 The other local responsibility function (SMF22) and EEA branch senior manager functions (SMF21) Application 10C.8.1-1 G This section does not apply to a UK SMCR firm. Other local responsibility function (SMF22) 10C.8.1 R A person performs the other local responsibility function in relation to a branch maintained in the United Kingdom by a third-country relevant authorised person non-UK SMCR firm if that person:
(1) is performing:
(a) a function allocated to that person under SYSC 4.8.10R (Local responsibility for a firm’s activities, business areas and management functions) SYSC 26.3.1R (Main rules) in relation to the firm; or (b) FCA-prescribed senior management responsibility number (8) (z) in the table in SYSC 4.8.9R SYSC 24.2.5R (functions in relation to CASS) allocated to that person under SYSC 4.8.6R (FCA-prescribed senior management responsibilities) SYSC 24.2 (Allocation of FCA-prescribed senior management responsibilities:
Main allocation rules); and

FCA 2018/XX
(2) does not have an approval to perform any other designated senior management function in relation to the branch. 10C.8.1A R The other local responsibility function:
(1) applies to a firm to which SYSC 26 (Senior managers and certification regime: Overall and local responsibility) applies; and (2) does not apply to an EEA SMCR firm. 10C.8.1B G The effect of SUP 10C.8.1AR is that the other local responsibility function only applies to one of the following types of non-UK SMCR firm:
(1) an SMCR dual regulated banking sector firm; and (2) a Solvency II firm (including a large non-directive insurer) but excluding an insurance special purpose vehicle and certain firms in run-off; but does not apply to any EEA SMCR firm. 10C.8.2 G The table in SUP 10C.8.3G gives:
(1) examples of how SUP 10C.8.1R(2) works; and (2) other examples of how the other local responsibility function works. 10C.8.3 G Table: Examples of how the other local responsibility function applies Example Comments (1) ‘A’ is allocated local responsibility for one of a branch’s main business lines. A is also appointed to perform a PRA-designated senior management function for the same branch. The firm is a PRA-authorised person. A only needs approval to perform the PRA-designated senior management function. (2) ‘A’ is outside the branch’s management structure and A’s responsibilities for the branch are limited to setting overall strategy for the branch. A does not have responsibility A is not performing the other local responsibility function. The reason for this is explained in SYSC 26.8.3G. SUP 10C.8.1R(2) is irrelevant to this example.

FCA 2018/XX for implementing that strategy.
(3) A small branch undertakes two business lines (wholesale lending and corporate investments). ‘A’ is head of wholesale lending and is also an executive director of the branch. ‘B’ is head of corporate investments and does not sit on the branch management committee but reports to it on corporate investments. The branch allocates local responsibility for these functions to A and B. Neither A nor B performs any other PRA or FCAdesignated senior management functions function or (if the firm is a PRA-authorised person) PRA-designated senior management function. A only needs approval to perform the executive executive director function. B needs approval to perform the other local responsibility function. (4) A branch does not have a Head of Internal Audit. ‘P’ is allocated local responsibility for internal audit in relation to that branch. P needs approval to perform the other local responsibility function. However, if P has already been approved to perform another PRA or FCAdesignated senior management function or (if the firm is a PRAauthorised person) PRA-designated senior management function, then P will not be performing the other local responsibility function. (5) ‘A’ is appointed to perform the executive executive director function. The same branch also allocates local responsibility for some branch functions to A. A only needs approval to perform the executive executive director function. (6) ‘A’ is approved to perform the other local responsibility function. Later, A is appointed to perform the executive executive director A requires approval for the other local responsibility function when A is first appointed. When A is later approved to perform the executive executive director function, A stops performing

FCA 2018/XX function for the same firm. the other local responsibility function. The firm should use Form E to apply for approval for A to perform the executive executive director function and to notify the FCA that A is no longer performing the other overall responsibility function. (7) ‘A’ is appointed to perform:
(a) the compliance oversight function for one firm (Firm X) in a group (which may or may not be a relevant authorised person); and (b) a function coming within the scope of the other local responsibility function for the United Kingdom branch of another firm (which is a thirdcountry relevant authorised person) in the same group (Firm Y). A needs approval to perform the compliance oversight function for Firm X and the other local responsibility function for Firm Y. (8) ‘A’ is appointed to take on some functions that come within the other local responsibility function. Later, A is appointed as chief risk officer. A is a type of firm for which being chief risk officer is a PRA designated senior management function. On A’s first appointment, A will need to be approved to perform the other local responsibility function. On being approved as chief risk officer, A stops performing the other local responsibility function as being chief risk officer is a PRA designated senior management function. (9) ‘A’ is appointed as an executive director. A then resigns and takes up a job with the same firm coming within the other overall responsibility function. On A’s first appointment, A will need to be approved to perform the executive executive director function. A will need to get approval to perform the other overall responsibility function before A gives up being a director takes up their new responsibilities. Note: Local responsibility is explained in SYSC 4.8.10R (Third-country relevant authorised persons: Allocation of responsibilities) SYSC 26 (Senior managers and certification regime: Overall and local responsibility). EEA branch senior manager function (SMF21)

FCA 2018/XX
10C.8.4 R (1) A person performs the EEA branch senior manager function in relation to the branch in the United Kingdom of an EEA relevant authorised person SMCR firm if that person has significant responsibility for one or more significant business units of the branch that carry on any of the activities listed in (2). (2) The activities listed in this paragraph are:
(a) designated investment business other than dealing in investments as principal, disregarding article 15 of the Regulated Activities Order; (b) processing confirmations, payments, settlements, insurance claims, client money and similar matters, in so far as this relates to designated investment business; (c) the activity of accepting deposits from banking customers and activities substantially connected to that activity to the extent that it does not fall within (a) or (b), above; and (d) activities that are subject to CASS. (3) In considering whether a person performs the functions in (2), only activities carried on from the branch are relevant. (4) Paragraph (2)(d) only applies in relation to the activities of a firm for which it has a top-up permission. 10C.8.5 G (1) The definition of the EEA branch senior manager function (SMF21) is similar to that of the significant management FCAspecified significant-harm function under SYSC 27.7.5R. However, only the former is an FCA-designated senior management function. (2) The main differences are:
(a) SUP 10C.8.4R(2)(d) is not included in the significant management FCA-specified significant-harm function; and (b) the overriding requirements in SUP 10C.3 (General material about the definition of controlled functions) do not apply to the significant management FCA-specified significant-harm function. 10C.8.6 G A person performing the EEA branch senior manager function could, for example, be:
(1) the head of a significant business unit carrying on the activities

FCA 2018/XX in SUP 10C.8.4R(2); or
(2) a member of a committee (that is, a person who, together with others, has authority to commit the branch) making decisions about those activities. EEA branch senior manager function (SMF21): meaning Meaning of significance 10C.8.7 G When considering whether a business unit is significant for the purposes of SUP 10C.8.4R, the firm should take into account all relevant factors in the light of the firm’s current circumstances and its plans for the future, including:
(1) the risk profile of that unit;
(2) its use or commitment of the firm’s capital; (3) its contribution to the profit and loss account; (4) the number of employees or approved persons working in the business unit; (5) the number of customers; and (6) any other factor which makes the unit significant to the conduct of the branch’s affairs. 10C.9 Minimising overlap with the PRA approved persons regime Application 10C.9.1 -1 G This section only applies to a PRA-authorised person. Introduction 10C.9.1 G SUP 10C.9 deals with how the FCA’s senior management managers regime for relevant authorised persons SMCR firms interacts with the PRA’s one. 10C.9.2 G Both the FCA and the PRA may specify a function as a designated senior management function in relation to a PRA-authorised person. 10C.9.3 G If a person’s job for a firm involves performing:
(1) an FCA-designated senior management function, the firm should apply to the FCA for approval; (2) a PRA-designated senior management function, the firm should apply to the PRA for approval;

FCA 2018/XX
(3) both an FCA-designated senior management function and a PRA-designated senior management function, the firm should apply to both the FCA and the PRA for approval (the purpose of SUP 10C.9 is to cut down the need for this sort of dual approval). FCA controlled functions absorbed into PRA controlled functions 10C.9.4 G The FCA is under a duty, under section 59A of the Act (Specifying functions as controlled functions: supplementary), to exercise the power to specify any senior management function as an FCA controlled function in a way that it considers will minimise the likelihood that approvals need to be given by both the FCA and the PRA for the performance by a person of senior management functions in relation to the same PRA-authorised person. 10C.9.5 G The FCA and PRA have coordinated their approved person regimes to reduce the amount of overlap. 10C.9.6 G (1) SUP 10C.9.8R applies when a firm is seeking approval from the PRA for a candidate to perform a PRA controlled function and the intention is that the candidate will also perform what would otherwise be an FCA governing function once the PRA gives its approval. SUP 10C.9.8R works by disapplying that FCA governing function. (2) Where (1) applies, the activities within that FCA governing function are included in the PRA controlled function for which the person has approval. The following parts of the PRA Rulebook deal with this:
(a) Chapter Two of the part of the PRA’s rulebook PRA Rulebook titled ‘Senior Management Functions’ deals with this ; (b) Chapter 2 of the part of the PRA Rulebook titled ‘Insurance - Senior Insurance Management Functions’ (c) Chapter 2 of the part of the PRA Rulebook titled ‘Large Non-Solvency II Firms – Senior Insurance Management Functions’; and (d) Chapter 2 of the part of the PRA Rulebook titled ‘Nonsolvency II Firms - Senior Insurance Management Functions’. 10C.9.7 G (1) SUP 10C.9.9G gives some examples of how SUP 10C.9.8R works. (2) The examples do not cover the other overall responsibility function because that function does not apply if the person

FCA 2018/XX holds any other designated senior management function for the same firm. See the table in SUP 10C.7.3G for examples of how this works. The main rule 10C.9.8 R A person (referred to as ‘A’ in this rule) is not performing an FCA governing function (referred to as the ‘particular’ FCA governing function in this rule) in relation to a PRA-authorised person (referred to as ‘B’ in this rule), at a particular time, if:
(1) A has been approved by the PRA to perform any PRAdesignated senior management function in relation to B; (2) throughout the whole of the period between the time of the PRA approval in (1) and the time in question, A has been the subject of a current PRA approved person approval to perform a PRAdesignated senior management function in relation to B; (3) at the time of the PRA approval referred to in (1), A was not subject to a current FCA approved person approval to perform the particular FCA governing function in relation to B; (4) as part of the application for the PRA approval referred to in (1), B notified the PRA that A would start to perform what would otherwise have been the particular FCA governing function (referred to as the ‘potential’ FCA governing function in this rule) at or around the time of the PRA approval in (1); and (5) A started to perform the potential FCA governing function at, or around the time of, the PRA approval in (1) and has continued to perform it up to the time in question. 10C.9.9 G Table: Examples of how the need for dual FCA and PRA approval in relation to PRA-authorised persons is reduced Example Whether FCA approval required Whether PRA approval required Comments (1) A is appointed as chief risk officer and an executive director. No. He A is not treated as performing the executive executive director function. Yes Chief risk officer is a PRA-designated senior management function. A’s functions as a director will be included in the PRAdesignated senior management function. To avoid the need for

FCA 2018/XX
Example Whether
FCA approval required
Whether
PRA approval required
Comments
FCA approval, A’s appointment as director should not take effect before PRA approval for the chief risk officer role. (2) Same as example (1), except that A will take up the role as an executive director slightly later because the approval is needed from the firm’s shareholders or governing body. No Yes The answer for (1) applies. The arrangements in this
section apply if the
application to the PRA says that A will start to perform the potential FCA governing function around the time of the PRA approval as well as at that time. (3) Same as example (1) but the application to the PRA does not mention that it is also intended that A is to be an executive director. Yes, to perform the executive executive director function. Yes SUP 10C.9.8R does not apply if the application for PRA approval does not say that A will also be performing what would otherwise be an FCA governing function. (4) A is to be appointed as chief executive and an executive director. No. A is not treated as performing the executive executive director function. Yes Being a chief executive is a PRAdesignated senior management function. A’s functions as a director will be included in the PRA controlled function. (5) A is Yes, when A Yes, when A SUP 10C.9.8R does

FCA 2018/XX
Example Whether
FCA approval required
Whether
PRA approval required
Comments appointed as chief risk officer. Later, A is appointed as an executive director while carrying on as chief risk officer. takes up the director role. The executive executive director function applies. takes up the chief risk officer role. not apply because, when the firm applied for approval for A to perform the PRA chief risk officer designated senior management function, there was no plan for A also to perform the executive executive director function. (6) A is appointed as an executive director. Later, A takes on the chief risk officer function and remains as an executive director. Yes, when A is appointed as director. The executive executive director function applies. Yes, when A takes up the chief risk officer role. When A is appointed as chief risk officer, A is still treated as carrying on the executive executive director function. A retains the status of an FCA-approved person. (7) A is appointed as chief risk officer. A then stops performing that role and for a while does not perform any controlled function for that firm. Later, A is appointed as an executive director with the same firm. Yes, when A is appointed as an executive director. The executive executive director function applies. Yes, when A takes up the chief risk officer role. SUP 10C.9.8R does not apply because there is no current PRA approval when A is being appointed as a director. (8) A is No, on A’s Yes, on A’s When A stops being a

FCA 2018/XX
Example Whether
FCA approval required
Whether
PRA approval required
Comments appointed as an executive director and chief risk officer at the same time. Later, A gives up the role as chief risk officer but remains as an executive director. first appointment (see example (1)). But when A gives up the role as chief risk officer, FCA approval is needed to perform the executive executive director function. first appointment. chief risk officer, A stops performing a PRA-designated senior management function. However, being an executive director requires FCA approval. A does not have that approval because A did not need it when A was first appointed. Form E should be used. The application should state that it is being made as a result of A ceasing to perform a PRAdesignated senior management function. Form A should be used if there have been changes in A’s fitness (SUP 10C.10.9D(4) ) The combined effect of SUP 10C.9.8R and the relevant PRA rules is that the firm has three months to secure approval by the FCA. During that interim period, A keeps the status of a PRA approved person performing the director element of the PRA chief risk designated senior management function - which is included in that function under relevant PRA rules. The relevant PRA rules say that, during this transitional period, A is still treated as performing the PRA chief risk designated senior management function and SUP 10C.9.8R says that, for as long as A is performing a PRA-

FCA 2018/XX
Example Whether
FCA approval required
Whether
PRA approval required
Comments designated senior management function, A does not perform the executive executive director function. (9) A is appointed as the chief finance officer and an executive director at the same time. Later, A switches to being chief risk officer while remaining as an executive director. No Yes The arrangements in SUP 10C.9.8R continue to apply, even though A switches between PRAdesignated senior management functions after the PRA’s first approval. (10) A is appointed chief risk officer and an executive director. A goes on temporary sick leave. A takes up his old job when he comes back. No, neither on A’s first appointment nor when A comes back from sick leave. Yes SUP 10C.9.8R still applies on A’s return because A does not stop performing either the PRA’s chief risk function or what would otherwise have been the executive executive director function just because A goes on temporary sick leave. (11) A is appointed to be chairman of the governing body and chairman of the No. A does not need approval to perform the chair chairman of the nomination Yes, on first appointment. Being chairman of the governing body is a PRA-designated senior management function. Therefore, the answer for example (1) applies.

FCA 2018/XX
Example Whether
FCA approval required
Whether
PRA approval required
Comments nomination committee at the same time. committee function. (12) ‘A’ is to be appointed to perform the Head of Overseas Branch PRAdesignated senior management function (SMF19) for a thirdcountry relevant authorised person SMCR firm. A is also an executive director of that firm’s UK branch. No. A is not treated as performing the executive executive director function. Yes A’s functions as a director will be included in the PRA controlled function. Note 1: The relevant PRA rules can be found in Chapter 2 of the part parts of the PRA rulebook called ‘Senior Management Functions’ Rulebook listed in SUP 10C.9.6G. Note 2: Where one of the examples in this table includes someone being chief risk or finance officer or chairman of the governing body, the example assumes that the firm is of a type for which that function is a PRA-designated senior management function. 10C.9.10 G (1) The potential FCA governing functions should be recorded in A’s statement of responsibilities and in the firm’s management responsibilities map. (2) A potential FCA governing function means a function that would have been an FCA governing function but which is not an FCA governing function because of SUP 10C.9.8R.

FCA 2018/XX
Further guidance on the arrangements between the FCA and PRA about approvals 10C.9.11 G The PRA cannot give its approval for the performance of a PRAdesignated senior management function without the consent of the FCA. The firm does not need to apply to the FCA for that consent. 10C.9.12 G Under section 59B of the Act (Role of FCA in relation to PRA decisions), the FCA may arrange with the PRA that, in agreed cases, the PRA may give approval without obtaining the consent of the FCA. No such arrangements are currently in force. 10C.10 Application for approval and withdrawing an application for approval Purpose 10C.10.1 G This section explains how a firm should apply for approval for a person to perform an FCA-designated senior management function. 10C.10.2 G Unless the context otherwise requires, in SUP 10C.10 (Application for approval and withdrawing an application for approval) to SUP 10C.15 (Forms and other documents and how to submit them to the FCA), where reference is made to a firm, this includes an applicant for Part 4A permission and other persons seeking to carry on regulated activities as a relevant authorised person an SMCR firm. When to apply for approval 10C.10.3 G (1) Section 59 of the Act (Approval for particular arrangements) says that a firm must take reasonable care to ensure that no one performs an FCA controlled function (including an FCAdesignated senior management function) unless that person is acting in accordance with an approval given by the FCA. (2) That means that where a candidate will be performing one or more FCA-designated senior management functions, a firm must take reasonable care to ensure that the candidate does not perform these functions unless they have prior approval from the FCA. Failure to apply for approval 10C.10.4 G (1) If a person performs an FCA controlled function (including an FCA-designated senior management function) without approval, it is not only the firm that is accountable. Under
section 63A of the Act (Power to impose penalties), if the FCA
is satisfied that:
(a) a person (‘P’) has at any time performed an FCA

FCA 2018/XX controlled function without approval; and (b) at that time P knew, or could reasonably be expected to have known, that P was performing an FCA controlled function without approval; it may impose a penalty on P of such amount as it considers appropriate. (2) A person performs a controlled function without approval for these purposes if that person is not acting in accordance with an approval given under section 59 (Approval for particular arrangements). Who should make the application? 10C.10.5 G In accordance with section 60 of the Act (Applications for approval), applications must be submitted by, or on behalf of, the firm itself, not by:
(1) the FCA candidate; or
(2) (where the FCA candidate works for the firm’s parent undertaking or holding company) by the firm’s parent undertaking or holding company. 10C.10.6 G (1) The firm that is employing the FCA candidate to perform the FCA-designated senior management function will usually make the submission itself. (SUP 10C.10.7G describes some common situations.) (2) Where a firm has outsourced the performance of an FCAdesignated senior management function, the details of the outsourcing determines whom the FCA anticipates will submit the FCA-approved persons application forms. (3) The firm which is outsourcing is referred to as ‘A’ and the person to whom the performance of the FCA-designated senior management function has been outsourced, or which makes the arrangement for the FCA-designated senior management function to be performed, is referred to as ‘B’. In each situation, A must take reasonable care to ensure that, in accordance with
section 59(2) of the Act, no person performs an FCAdesignated senior management function under an arrangement
entered into by its contractor in relation to the carrying on by A of a regulated activity, without approval from the FCA. 10C.10.7 G Outsourcing arrangements

FCA 2018/XX
Outsourcing arrangements
Explanation Submitting form
Firm A to firm B The FCA will consider
A to have taken reasonable care if it enters into a contract with B under which B is responsible for ensuring that the relevant FCAdesignated senior management functions are performed by FCAapproved SMF managers, and that it is reasonable for A to rely on this. Firm B submits FCAapproved persons forms on behalf of firm A. Outsourcing by A to B (both being a member of the same United Kingdom group and each having its registered office in the United Kingdom) See SUP 10C.3.9G Either A or B may submit FCA-approved persons forms on behalf of firms in the group (see SUP 15.7.8G). (i) A to B, where B:
(a) is not an authorised person; and
(b) is not part of the same group as
A; or
(ii) A to B, where
A is a branch of an overseas firm in the United Kingdom, and B is an overseas undertaking of the same group; or (iii) A to B, where A is a UK authorised Responsibility for (as opposed to the performance of) any activity outsourced to B will remain with A. See SYSC 8. A ensures that an individual approved by the FCA or the PRA to perform a designated senior management function has responsibility for the outsourced arrangement and A submits a form in relation to that individual.

FCA 2018/XX subsidiary of an overseas firm and B is an overseas undertaking of the same group. How to apply for approval 10C.10.8 D (1) An application by a firm for the FCA’s approval under section 59 of the Act (Approval for particular arrangements) for the performance of an FCA-designated senior management function must be made by completing Form A (SUP 10C Annex 2D), except where SUP 10C.10.9D requires Form E. (2) If a firm must make an application using Form A, it must use Form A (shortened form) if: in the circumstances described in SUP 10C.10.8AD. (a) the person has current approved person approval to perform:
(i) an FCA controlled function that is a significant influence function; or (ii) an FCA-designated senior management function; or (iii) a PRA controlled function; and (b) there have been no matters arising in relation to the fitness and propriety of the person to whom the application relates which mean that the information provided to the FCA or the PRA regarding fitness and propriety in connection with the current approved person approval may have changed since the application for the current approved person approval was made. 10C.10.8A D If a firm must make an application using Form A, it must use Form A (shortened form) if:
(1) the candidate:
(a) has current approved person approval to perform:
(i) an FCA controlled function that is a significant influence function; or (ii) an FCA-designated senior management function; or

FCA 2018/XX
(iii) a PRA controlled function; or
(b) has had current approved person approval of the type described in (a) within the previous six months; and (2) there have been no matters arising in relation to the fitness and propriety of the person to whom the application relates which mean that the information provided to the FCA or the PRA regarding fitness and propriety in connection with the current approved person approval in (1)(a) or (b) may have changed since the application for that current approved person approval was made. 10C.10.9 D (1) A firm must use Form E (SUP 10C Annex 3D) where an approved person:
(a) is both ceasing to perform one or more controlled functions; and (b) needs to be approved in relation to one or more FCAdesignated senior management function; within the same firm or group. (2) A firm must not use Form E if the approved person has never before been approved to perform for any firm:
(a) an FCA controlled function that is a significant influence function; (b) an FCA-designated senior management function; or (c) a PRA controlled function. (3) A firm must not use Form E if the approved person has not been subject to a current approved person approval from the FCA or PRA to perform for any firm for more than six months:
(a) an FCA controlled function that is a significant influence function; (b) an FCA-designated senior management function; or (c) a PRA controlled function. (4) A firm must not use Form E if:
(a) a notification has been made or should be made:
(i) to the FCA under SUP 10C.14.18R (Changes in fitness to be notified under Form D); or

FCA 2018/XX
(ii) (if the firm is a PRA-authorised person) to the PRA under any equivalent PRA rule; or (iii) to the FCA under SUP 10A.14.17R (the equivalent to (i) for firms that are not relevant authorised persons) ; or in SUP 10A). (iv) the PRA requirements corresponding to (iii); (whichever is applicable); (b) a notification has been made or should be made to the FCA or (if the firm is a PRA-authorised person) PRA under any of the following:
(i) section 63(2A) of the Act (Duty to notify regulator of grounds for withdrawal of approval); or (ii) [deleted] (iii) section 64C of the Act (Requirement for relevant authorised persons to notify regulator of disciplinary action); or (c) (if the firm is a PRA-authorised person) a notification has been made or should be made to the PRA under any provision of Chapter 11 of the part of the PRA rulebook Rulebook titled “Notifications” (Conduct Rules:
Notifications) corresponding to the requirements in (b); or (d) any of the circumstances in SUP 10C.14.7R (Qualified Form C) apply; in relation to any:
(e) controlled functions which that person is ceasing to perform (as referred to in (1)); or (f) any controlled function that they are continuing to perform for that firm or a firm in the same group. 10C.10.10 G SUP 10C.15 (Forms and other documents and how to submit them to the FCA) explains how applications should be submitted. Statements of responsibilities 10C.10.11 G An application by a firm for the FCA’s approval under section 59 of the Act (Approval for particular arrangements) for the performance of an FCA-designated senior management function should be accompanied

FCA 2018/XX by a statement of responsibilities.
10C.10.12 G SUP 10C.11 (Statements of responsibilities) contains more material about statements of responsibilities, including (in particular) about a statement of responsibilities submitted under an application under SUP 10C.10. Other material to be included in an application 10C.10.13 G A firm to which SYSC 25.9 (Handover procedures and material) applies should include in an application a reasonable summary of:
(1) any handover certificate; and
(2) any other handover material; referred to in SYSC 25.9 (Handover procedures and material) that relates to the responsibilities that the candidate is to perform. 10C.10.13A D A firm to which SYSC 25.2 (Management responsibilities maps: Main rules) applies must include in an application for the FCA’s approval under section 59 of the Act (Approval for particular arrangements) for the performance of an FCA-designated senior management function the latest version of the firm’s management responsibilities map. Vetting of candidates by the firm 10C.10.14 G Under section 60A of the Act, before a firm makes an application for approval, it should be satisfied that the candidate is a fit and proper person to perform the function to which the application relates. In deciding that question, the firm should have particular regard to whether the candidate, or any person who may perform a function on the candidate’s behalf:
(1) has obtained a qualification;
(2) has undergone, or is undergoing, training; (3) possesses a level of competence; or (4) has the personal characteristics; required by FCA rules in relation to persons performing functions of the kind to which the application relates. 10C.10.15 G For guidance on criteria that a firm should use for assessing whether an FCA candidate is fit and proper (including the FCA rules referred to in SUP 10C.10.14G), see FIT. Criminal records checks and verifying fitness and properness 10C.10.16 R (1) A firm must (as part of its assessment of whether a candidate is

FCA 2018/XX a fit and proper person to perform an FCA-designated senior management function and to verify the information contained in the application to carry out the FCA-designated senior management function) obtain the fullest information that it is lawfully able to obtain about the candidate under Part V of the Police Act 1997 (Certificates of Criminal records, etc) and related subordinated legislation of the UK or any part of the UK before making the application. (2) This rule does not apply to a firm that is a sole trader if the candidate is the sole trader themselves. 10C.10.17 G (1) In England and Wales a firm should get an application form from the Disclosure and Barring Service (DBS) or an umbrella body (a registered body that gives access to DBS checks). (2) The firm should ask the candidate to fill in and return the form to the firm. The firm should then send the completed application form to the DBS or the firm’s umbrella body. (3) The firm should then ask the candidate to show the firm the certificate when the candidate receives it from the DBS. (4) There is an equivalent procedure in Scotland (involving Disclosure Scotland) and Northern Ireland (involving AccessNI). 10C.10.18 G The firm should not send a copy of the certificate to the FCA unless required to do so under SUP 10C.10.28G (requests for additional information). 10C.10.19 G If the candidate is employed by a contractor, the firm may ask the contractor to obtain the certificate. 10C.10.20 G A firm should also check the Financial Services Register as part of its assessment of whether a candidate is fit and proper and to verify the information contained in the application for approval. 10C.10.21 G If appropriate, a firm should:
(1) carry out a criminal record check; and (2) check any equivalent of the Financial Services Register; in a jurisdiction outside the UK. This may be appropriate if the candidate has spent time working or living in that jurisdiction. 10C.10.22 G A firm should consider whether it should take additional steps to verify any information contained in an application to carry out an FCAdesignated senior management function or that it takes into account in its assessment of whether a candidate is a fit and proper person.

FCA 2018/XX
10C.10.23 G Please see SYSC 22 (Regulatory references) about the requirement for a firm to ask for references from previous employers. Processing an application 10C.10.24 G The Act sets out the time that the FCA has to consider an application and come to a decision. 10C.10.25 G In any case , where the application for approval is made by a person applying for a Part 4A permission, the FCA has until the end of whichever of the following periods ends last:
(1) the period within which an application for that permission must be determined; and (2) the period of three months from the time it receives a properly completed application. 10C.10.26 G In any other case, it is the period of three months from the time it receives a properly completed application. 10C.10.27 G The FCA will deal with cases more quickly than this whenever circumstances allow and will try to meet the standard response times published on the website and in its Annual Report. However, the processing time will be longer than the published standard response times if:
(1) an application is incomplete when received; or (2) the FCA has knowledge that, or reason to believe that, the information is incomplete. 10C.10.28 G Before making a decision to grant the application or give a warning notice, the FCA may ask the firm for more information about the FCA candidate. If it does this, the three-month period in which the FCA must determine a completed application:
(1) will stop on the day the FCA requests the information; and (2) will start running again on the day on which the FCA finally receives all the requested information. 10C.10.29 G If there is a delay in processing the application within the standard response time, the FCA will tell the firm making the application as soon as this becomes apparent. 10C.10.30 G (1) Application forms must always be completed fully and honestly. Further notes on how to complete the form are contained in each form. (2) If forms are not completed fully and honestly, applications will be subject to investigation and the FCA candidate’s suitability

FCA 2018/XX to be approved to undertake an FCA controlled function will be called into question. (3) A person who provides information to the FCA that is false or misleading may commit a criminal offence and could face prosecution under section 398 of the Act, regardless of the status of their application. 10C.10.31 G The FCA may grant an application only if it is satisfied that the FCA candidate is a fit and proper person to perform the FCA-designated senior management function stated in the application form. Responsibility lies with the firm making the application to satisfy the FCA that the FCA candidate is fit and proper to perform the FCAdesignated senior management function applied for. 10C.10.32 G For further guidance on criteria for assessing whether an FCA candidate is fit and proper for the purposes of SUP 10C.10.31G, see FIT. Decisions on applications 10C.10.33 G The FCA must:
(1) grant the application;
(2) grant the application subject to conditions or limitations (see SUP 10C.12 for more information); or (3) refuse the application. 10C.10.34 G Whenever it grants an application, the FCA will confirm this in writing to all interested parties. 10C.10.35 G If the FCA proposes to take the steps in SUP 10C.10.33G(2) or SUP 10C.10.33G(3) in relation to one or more FCA-designated senior management functions, it must follow the procedures for issuing warning and decision notices to all interested parties. The requirements relating to warning and decision notices are in DEPP 2. Withdrawing an application for approval 10C.10.36 R A firm notifying the FCA of its withdrawal of an application for approval must use Form B (SUP 10A Annex 5R). 10C.10.37 G Under section 61(5) of the Act (Determination of applications), the firm may withdraw an application only if it also has the consent of:
(1) the candidate; and
(2) the person by whom the candidate is or would have been employed, if this is not the firm making the application.

FCA 2018/XX
10C.10.38 G SUP 10C.15 (Forms and other documents and how to submit them to the FCA) explains how a notice of withdrawal should be submitted. 10C.11 Statements of responsibilities What a statement of responsibilities is 10C.11.1 G (1) Section 60(2A) of the Act (Applications for approval) says that, if a firm is applying for approval from the FCA or the PRA for a person to perform a designated senior management function, the regulator to which the application is being made must require the application to contain, or be accompanied by, a statement setting out the aspects of the affairs of the firm which it is intended that the person will be responsible for managing in performing the function. (2) That statement is a statement of responsibilities. (3) A statement of responsibilities includes a statement amended under section 62A of the Act (see SUP 10C.11.5G). What this section covers 10C.11.2 G (1) This section is about the FCA’s requirements for statements of responsibilities. (2) However, in the case of a PRA-authorised person, where applications and notifications relate both to FCA-designated senior management functions and to PRA ones, the regulators’ requirements are consistent with each other. (3) The general material in this section (SUP 10C.11.13G to SUP 10C.11.35G) applies to statements of responsibilities submitted in all the cases covered by this section. It covers statements of responsibilities submitted as part of an application for approval or variation and revised statements of responsibilities. Applications for approval 10C.11.3 D An application by a firm for the FCA’s approval under section 59 of the Act (Approval for particular arrangements) for the performance of an FCA-designated senior management function must be accompanied by a statement of responsibilities (SUP 10C Annex 5D). 10C.11.4 G (1) SUP 10C.10 (Application for approval and withdrawing an application for approval) explains the procedures for applying for approval. (2) SUP 10C.15 (Forms and other documents and how to submit

FCA 2018/XX them to the FCA) explains how applications for approval should be submitted. (3) See the table in SUP 10C.11.19G for examples of how the requirements of this section about including statements of responsibilities in applications for approval apply in different situations. Revised statements of responsibilities: Introduction 10C.11.5 G Under section 62A of the Act, a firm must provide the FCA with a revised statement of responsibilities if there has been any significant change in the responsibilities of an FCA-approved SMF manager. More precisely:
(1) if a firm has made an application (which was granted) to the FCA for approval for a person to perform an FCA-designated senior management function; (2) the application contained, or was accompanied by, a statement of responsibilities; and (3) since the granting of the application, there has been any significant change in the aspects of the firm’s affairs which the FCA-approved SMF manager is responsible for managing in performing the function; the firm should provide the FCA with a revised statement of responsibilities. Revised statements of responsibilities: Meaning of significant change 10C.11.6 G (1) This paragraph sets out non-exhaustive examples of potential changes which, in the FCA’s view, may be significant and thus require the submission of a revised statement of responsibilities. (2) A variation of the FCA-approved SMF manager’s approval, either at the firm’s request or at the FCA’s or (in the case of a PRA-authorised person), PRA’s initiative, resulting in the imposition, variation or removal of a condition or time limit, may involve a significant change. (3) Fulfilling or failing to fulfil a condition on approval may involve a significant change. (4) The addition, re-allocation or removal of any of the following (or part of one):
(a) an FCA-prescribed senior management responsibility; (b) (in the case of a PRA-authorised person), a PRAprescribed senior management responsibility or a PRA-

CP17/26: Individual accountability - extending the Senior Managers and Certification Regime to insurers

Lineage: In force