Mid-tier regulated firms face the same FCA and PRA operational resilience expectations as their largest peers. They don't have the same internal resource or the budget for Big Four consultancy fees and junior delivery teams. We exist to close that gap.
Kieran founded FourthLine in 2009 as a specialist regulatory change consultancy, supporting UK financial services firms through major regulatory programmes including Solvency II, MiFID II, and GDPR. That breadth of regulatory delivery across prudential, conduct, and data frameworks built the cross-cutting understanding of how regulators think, write rules, and supervise compliance that underpins every FourthLine engagement today.
In 2021, Kieran pivoted FourthLine to focus exclusively on operational resilience. The rationale was straightforward: the FCA and PRA's operational resilience framework represented the most significant shift in regulatory expectation for mid-tier financial services firms in a decade, and most firms did not have the internal capability to meet it without specialist support. FourthLine was rebuilt around that single problem.
Since 2021, Kieran has led more than 30 operational resilience and business continuity engagements across insurance, banking, investment management, and payments including supporting 20 or more firms through the March 2022 FCA and PRA policy requirements covering IBS identification, impact tolerance setting, vulnerability mapping, severe but plausible scenario testing, and self-assessment completion.
Recent engagements include designing and testing six material supplier exit plans for a global payments firm to DORA Article 28 standard ahead of the January 2025 deadline, delivering an organisation-wide BCM recovery planning programme for a leading UK insurer aligned to operational resilience and crisis management frameworks, and rectifying and uplifting the operational resilience programme, BCMS, and IT disaster recovery capability for a multi-asset investment brokerage against FCA PS21/3, SYSC 15A, SYSC 8, and SYSC 13A requirements.
His technical depth spans the full operational resilience architecture: FCA and PRA operational resilience frameworks, PRA outsourcing and third-party risk management, business continuity management system design and implementation, ICT disaster recovery, supplier exit testing, and cross-cutting obligations including Consumer Duty.
Kieran leads and delivers every FourthLine engagement personally. The practitioner you speak to in the first conversation is the practitioner responsible for your programme.
The practitioner who scopes your engagement is the practitioner who delivers it. Every FourthLine engagement is led by Kieran Maplesden or a named senior associate throughout.
Our methodology is built specifically for FCA and PRA-regulated financial services firms - not a generic operational resilience framework repurposed from another sector. Every deliverable is calibrated to the regulatory standard your supervisor applies.
All engagements are fixed fee. The scope agreed at the outset is what we deliver. No open-ended billing, no surprise invoices. Change control applies only to material scope changes, agreed in writing in advance.
Every deliverable is built to withstand supervisory scrutiny - not just satisfy internal governance. The question we apply to every piece of work is: would this survive a targeted FCA or PRA review? If not, it is not finished.
Talk directly with Kieran about your firm's operational resilience position. No pitch. No proposal. An intelligence conversation.
Quickly and efficiently build the materials you need to support your inbound marketing strategy.
If you’d like to find out more about any of the services that FourthLine offer, fill in the form below and one of our team will be in touch as soon as possible