top of page
Andrew Lingley
Marketing Manager
More actions
Profile
Join date: Jul 25, 2024
Overview
Company
Drova
Posts (59)
Aug 21, 2025 ∙ 3 min
What happens when operational resilience fails… very publicly?
When operational resilience fails, the world notices.
The past year has shown that business continuity plans are not enough. Ransomware attacks, global outages, power grid failures and data breaches have exposed a pattern of unpreparedness. It is no longer about having a backup plan. It is about proving your organisation can withstand disruption, recover fast and protect what matters most. Resilience is no longer optional. It is the standard.
283
0
Aug 21, 2025 ∙ 4 min
SYSC15A and the credibility gap: Why are resilience plans falling short under scrutiny?
There is a difference between having a plan and being ready to prove it.
Under the FCA’s PS21/3 standard, many firms look compliant on paper but fall short under scrutiny. The planning phase is over. The focus now is on outcomes and evidence. The FCA expects firms to show how they will keep services running during disruption, with proof that is current, complete, and connected. Anything less reveals a credibility gap that regulators are ready to test.
1
0
Aug 21, 2025 ∙ 3 min
Third-party resilience under PS21/3: What the FCA wants you to prove - and the simplest way to prove it
Third-party resilience is now a board-level accountability.
Under the FCA’s PS21/3 standard, outsourcing doesn’t remove responsibility. Firms must prove they can withstand supplier disruption and stay within impact tolerances. That means mapping dependencies, testing scenarios, and holding evidence that stands up to scrutiny. When failure hits, the regulator won’t ask who caused it; they’ll ask why you weren’t ready.
37
0
bottom of page