Skip to content
Go to homepageDrova logo
Compliance & Assurance

Operational resilience fail leads to £48.6m fine

TSB’s £48.6M penalty shows what happens when operational resilience isn’t backed by testing, governance, and customer considerations.

Andrew Lingley
Andrew LingleyHead of Growth & Marketing Operations
4 SEPT
Banking district skyline representing operational resilience risk

TSB’s £48.6M lesson

TSB’s data migration left 5.2M customers locked out. Regulators found governance, testing, and contingency planning were inadequate—leading to a £48.6M fine.

What the FCA/PRA expect

Regulators said the bank failed to plan the migration, lacked contingency options, and didn’t organise affairs with adequate risk systems. Operational resilience is no longer optional; proof is required.

Operational resilience stays top priority

The FCA’s framework requires firms to set impact tolerances and test important business services. A DR plan or ISO cert isn’t enough—it’s the baseline.

Treat resilience as a strategic advantage

Use resilience to surface macro/systemic risks, align ESG/sustainability goals, and protect customers when services fail.

Drova maps important business services, tolerances, scenarios, and evidence so you can stay compliant and customer-centric.

Prove operational resilience before the regulator asks