Lloyd's aligned its cyber underwriting oversight with PRA Supervisory Statement SS4/17 so that managing agents follow one set of standards: SS4/17 supersedes and replaces the earlier Lloyd's requirements in Market Bulletin Y4938 (2015), and a managing agent that can demonstrate compliance with SS4/17 is considered to meet Lloyd's expectations for underwriting cyber risk. Managing agents attest, for each syndicate they manage, that they comply with SS4/17 (introduced as part of the annual board attestation). Lloyd's continues to oversee cyber underwriting through its oversight plan, thematic reviews and cyber-attack and Realistic Disaster Scenario reporting. SS4/17 applies to all UK non-life insurers and reinsurers within Solvency II, expressly including the Society of Lloyd's and managing agents, and was updated in November 2024 only to replace references to retained EU regulation with PRA Rulebook rules.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.