UK FCA/PRA Operational Resilience Framework F-2.5: Set an impact tolerance for each important business service and review it at least yearly

What else in your programme already covers this

This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in FCA SYSC 15A operational resilience (in force) – UK FCA/PRA Operational Resilience Framework

• F-2.1 Identify important business services and review them at least yearly
• F-2.9 Be able to remain within impact tolerance in severe but plausible disruption (by 31 March 2025)
• F-3.1 Maintain sound, effective and comprehensive strategies, processes and systems for operational resilience
• F-4.1 Map the people, processes, technology, facilities and information behind each service and keep it current
• F-5.1 Keep an up-to-date testing plan that shows how assurance will be gained
• F-5.3 Scenario test against severe but plausible disruptions, regularly and after changes
• F-5.8 Run lessons learned after tests and real disruptions and make the improvements
• F-6.1 Keep a written self-assessment of compliance and retain every version for six years