Financial Services Authority
Themes: FSA Risk management
See the list of related resources at the bottom of this page.
The Financial Services Authority is the single statutory regulator in the UK responsible for regulating deposit-taking, insurance and investment business. It assumed its full powers on 2nd December 2001 (N2).
The FSA practices risk-based regulation. It has four statutory objectives, and tries to manage the risk to those objectives. The objectives are:
- Market confidence
- Maintaining confidence in the financial system;
- Public awareness
- Promoting public understanding of the financial system;
- Consumer protection
- Securing the appropriate degree of protection for consumers;
- Reduction of financial crime
- Reducing the extent to which it is possible for a business carried on by a regulated person to be used for a purpose connected with financial crime.
Regulated firms are expected to have frameworks in place to manage the risks to the FSA's objectives. They may manage other risks too, of course, such as risks to shareholder value.
The FSA assesses the risk category of its regulated firms by looking at impact (essentially measured by the size of the firm) and the probability of a risk crystalising, based on its risk management framework, compliance culture, and systems and controls. The level of supervision depends on a combination of these two factors, of which impact appears to have the greater effect: the smallest firms will not receive heavy supervision however bad their practices.
The FSA emphasises that the aim is not a zero-failure regime. The belief is that a small number of low impact failures will not materially affect the statutory objectives: a single high impact failure would be much more significant.
Resources
- Financial Services Authority
- The FSA is the regulatory authority for the financial services industry in the UK. Its website at http://www.fsa.gov.uk contains all the public documents produced by the FSA, including consultation papers and the texts of speeches as well as the currently applicable Handbook of rules and guidance.
- A new regulator for the new millennium
- This is the precursor to the Building the new Regulator series of reports issued by the Financial Services Authority. It describes the FSA's statutory objectives and its approach to regulation, including the operating framework and regulatory tools. The report, which was published in January 2000, is available at http://www.fsa.gov.uk/pubs/policy/p29.pdf.
- Building the new regulator: Progress report 1
- This is the first report in the series issued by the Financial Services Authority. It was published in December 2000, and describes the risks to the FSA's statutory objectives and the method of assessing the impact of particular risks. It then goes on to consider how the probability of risks can be assessed. In Appendix 1 it provides five case studies of the impact/probability assessment framework, indicating the regulatory relationships that would be likely for various combinations of impact and probability. The report is available at http://www.fsa.gov.uk/pubs/policy/bnr_progress1.pdf.
- Building the new regulator: Progress report 2
- The Financial Services Authority have issued a series of reports outlining their new risk-based regulatory framework. This report, issued in February 2002, describes their risk-based operating framework and what it means for the firms that they regulate. In particular, it includes (as Appendix B) a probability assessment matrix that provides the risk classification system that they use. Note that the FSA is interested only in risks to their statutory objectives, and that these may not be the same as, for example, risks to shareholder value. The report is available at http://www.fsa.gov.uk/pubs/policy/bnr_progress2.pdf.
- The future regulation of insurance: A progress report
- Despite its title, this report can be seen as the third in the Building the new Regulator series issued by the Financial Services Authority. It was issued in October 2002. It sets out the regulatory agenda (for insurance firms) for the next few years, and is a result of the so-called Tiner project. It emphasises that firms should realise that the new style of regulation means that they should modernise their governance and risk management frameworks, and their systems and controls. Half a dozen areas of particular concern are highlighted. The report is available at http://www.fsa.gov.uk/pubs/policy/bnr_progress3.pdf.
- Current consultations at the FSA
- The FSA maintain a list of current consultation and discussion papers at http://www.fsa.gov.uk/pages/Library/Policy/CP/current/index.shtml.
- The firm risk assessment framework
- This is the fourth document in the Building the new Regulator series of reports issued by the Financial Services Authority. It describes the FSA's ARROW framework for risk assessment and is essential reading for anyone in a regulated firm who will be involved in the risk assessment process. It was published in February 2003 and is available at http://www.fsa.gov.uk/pubs/policy/bnr_firm-framework.pdf.
- PS142_2: Building a framework for operational risk management: the FSA's observations - Feedback on industry practice as we prepare to implement CP142
- This Policy statement reports on the main issues arising from Consultation paper 142 ('Operational risk systems and controls') published in July 2002. It can be found at http://www.fsa.gov.uk/Pages/Library/Policy/Policy/2003/PS142_2.shtml.
- PS97_115: Integrated Prudential Sourcebook - Feedback on CP115 (Integrated Prudential Sourcebook - timetable for implementation) and CP97 (Integrated Prudential Sourcebook)
- This policy statement from the FSA was issued after feedback on CP97 and CP115. It was issued in July 2002 and is available at http://www.fsa.gov.uk/pages/Library/Policy/Policy/2002/ps115_97.shtml.
- Restructuring of prudential and systems and controls material in the FSA Handbook
- The FSA is restructuring the prudential and systems and controls material in the Handbook, because of the implementation of the Capital Requirements Directive. The details of the restructuring are given in http://www.fsa.gov.uk/pages/About/What/International/PSB/pdf/stages.pdf
- PS142: Operational risk systems and controls - Feedback on CP142
- This Policy statement reports on the main issues arising from Consultation paper 142 ('Operational risk systems and controls') published in July 2002. It can be found at http://www.fsa.gov.uk/Pages/Library/Policy/Policy/2003/ps142.shtml.
- CP 142: Operational risk systems and controls
- Consultation paper 142 from the FSA contains feedback on the operational risk and systems and controls sections of CP97, and contains new draft guidance. It is available at http://www.fsa.gov.uk/Pages/Library/Policy/CP/2002/142.shtml. It was issued in July 2002 and the consultation period ended on 31st October 2002.
- CP143: Integrated Prudential sourcebook - Feedback on chapters of CP97 applicable to insurance firms and supplementary consultation
- Consultation paper 143 from the FSA contains feedback on some of CP97. There are two areas on which the FSA is consulting again: credit risk for insurers, and final bonuses on with-profits policies. It is available at http://www.fsa.gov.uk/pages/Library/Policy/CP/2002/143.shtml. It was issued in July 2002 and the consultation period ended on 31st October 2002.
- CP140: The Interim Prudential Sourcebooks for Insurers and Friendly Societies and the Lloyd's Sourcebook: Guidance on Systems and Controls
- Consultation paper 140 from the FSA sets out guidance on •high-level controls; • risk assessment; • legal risk; • internal audit; • management information; • outsourcing; and • group risk. This guidance will take effect before the Prudential Sourcebook is implemented in 2004. It is available at http://www.fsa.gov.uk/Pages/Library/Policy/CP/2002/140.shtml. It was issued in July 2002 and the consultation period ended on 3rd October 2002. PS140 is the result of the consultation.
- PS140: The Interim Prudential sourcebooks for Insurers and Friendly Societies and the Lloyd's sourcebook: Guidance on Systems and controls - Feedback on CP140 and 'made' text
- Policy statement 140 from the FSA sets out guidance on •high-level controls; • risk assessment; • legal risk; • internal audit; • management information; • outsourcing; and • group risk. This guidance was issued in December 2002 and is available at http://www.fsa.gov.uk/Pages/Library/Policy/Policy/2002/ps140.shtml. It takes effect from 1st February 2003.
- Building a framework for operational risk management: the FSAs observations
- The FSA published this document in July 2003, as they prepared to implement CP142, the consultation paper on operational risk systems and controls. The documument is the result of discussions the FSA held with 22 firms actively developing risk management systems for operational risk. It describes instances of good practice, and discusses the progress that has been made so far. The main conclusion is that although considerable progress has been made, the industry is still at an early stage of developing operational risk frameworks. The report is available at http://www.fsa.gov.uk/pubs/policy/ps142_2.pdf
- PS04/16: Integrated Prudential sourcebook for insurers
- This Policy Statement reports on the main issues arising from Consultation Paper 190 (Enhanced capital requirements and individual capital assessments for non-life insurers), Consultation Paper 195 (Enhanced capital requirements and individual capital assessments for life insurers) and the audit and reviewing actuary proposals in Consultation Paper 202 (Insurance regulatory reporting – changes to the publicly available annual return for insurers) and publishes the associated rules and guidance. It is available at http://www.fsa.gov.uk/Pages/Library/Policy/Policy/2004/04_16.shtml.
- CP97: Integrated Prudential Sourcebook
- Consultation paper 97 from the FSA is a massive document, presenting the draft Integrated Prudential Sourcebook. It is available at http://www.fsa.gov.uk/Pages/Library/Policy/CP/2001/97.shtml. It was issued in June 2001 and the consultation period ended on 31st December 2001. CP115 was a supplementary CP to CP97. CP97 has been superseded by its feedback documents: PS97_115, CP142, CP143.
- CP190: Enhanced capital requirements and individual capital assessments for non-life insurers
- Consultation paper 190 from the FSA discusses how capitial requirements will be determined for non-life insurers. It was issued in July 2003, and the consultation period ended on 30 November 2003. The overall effect of the proposals will be to introduce a new risk-based minimum requirement, the ECR (Enhanced Capital Requirement), and the concept of ICG (Individual Capital Guidance) which will take into account both the ECR and the systems and controls that firms have in place. CP190 is available at http://www.fsa.gov.uk/Pages/Library/Policy/CP/2003/190.shtml
- CP195: Enhanced capital requirements and individual capital assessments for life insurers
- Consultation paper 195 from the FSA discusses how capitial requirements will be determined for non-life insurers. It was issued in August 2003, and the consultation period ended on 30 November 2003. The overall effect of the proposals will be to introduce a new risk-based minimum requirement, the ECR (Enhanced Capital Requirement), and the concept of ICG (Individual Capital Guidance) which will take into account both the ECR and the systems and controls that firms have in place. CP195 is available at http://www.fsa.gov.uk/Pages/Library/Policy/CP/2003/195.shtml
