16 weeks from instruction.
Refreshed IBS mapping: updated across all four Important Business Services, incorporating 11 new technology dependencies and three previously unregistered material outsourcing arrangements from the integrated delegated authority business
Threats and vulnerabilities register: ranked assessment across people, process, technology, facilities and third-party resilience pillars
Scenario test report (technology outage): full exercise covering policy administration system failure, tolerance position, and three immediate remediation actions
Scenario test report (supplier exit): full exercise covering claims processor administration scenario, with exit feasibility assessed against SS2/21 and two contractual gaps escalated to legal and procurement
Refreshed self-assessment: fully redrafted to SS1/21 chapter 8 standard, reflecting current mapping, validated impact tolerances, testing outcomes and remediation status; board-approved prior to PRA engagement
Board operational resilience MI pack: position-based reporting showing current tolerance status per IBS, scenario outcomes, remediation tracker and investment recommendations; approved at dedicated board session
The PRA supervisory engagement concluded without material findings. The supervisor noted the quality of the updated mapping and the substance of scenario testing evidence as indicators of a programme taken seriously at senior management level.
The board approved a self-assessment and MI pack that gave them a genuine, evidence-based view of the firm's resilience position for the first time. Three critical vulnerabilities were remediated within the programme timeline. The SMF24 could demonstrate active governance oversight with a traceable decision trail.
Beyond the supervisory engagement, the programme produced a structural shift in how the board engaged with operational resilience. Position-based MI replaced activity updates, and board members began asking substantively different questions: about specific vulnerability timelines, supplier exit readiness, and the investment case for outstanding remediation. That governance dynamic is precisely what SS1/21 is designed to produce.
FourthLine was retained on an Annual Resilience Retainer following programme completion, providing ongoing scenario testing, self-assessment refresh, and board MI support.
What sets FourthLine apart is that the person who sells the engagement is the person who delivers it. Senior expertise throughout, not just at the proposal stage. The quality of the evidence pack they produced would not have looked out of place coming from a Big Four firm, at a fraction of the cost.
A structured 4–6 week assessment of your Banking firm's operational resilience position against PRA and FCA requirements. Fixed fee: £15k–£25k. Board-ready gap report delivered within 6 weeks