Know your gap before your regulator tells you what it is.

The FourthLine Diagnostic Assessment is a structured 4–6 week gap analysis of your firm's operational resilience programme against the PRA SS1/21, FCA SYSC 15A, or DORA evidencing standard. It produces a current state assessment, a prioritised gap register, a regulatory traceability matrix, and a board-ready remediation roadmap. Fixed fee. Senior-led. Decision-ready output.

Book a Scoping Call with Kieran
Download the Product Overview

THE PROBLEM THIS SOLVES

The March 2025 FCA and PRA operational resilience embedding deadline has passed. Supervisors are no longer asking whether firms have a framework - they are asking whether the framework is evidenced, tested, and credible under scrutiny. For most mid-tier firms, the gap between what their documentation says and what their regulatory evidence actually demonstrates is wider than their board currently appreciates.

The Diagnostic Assessment tells you exactly where that gap is, what it means for your regulatory exposure, and what needs to be done.  It is an independent, evidence-led assessment that produces something your board can act on.

What the diagnostic delivers

  • Regulatory traceability matrix — mapping of your current evidence holdings against the specific PRA SS1/21, FCA SYSC 15A, and DORA requirements applicable to your firm
  • Current state assessment report — independent view of your programme against the standard supervisors are applying in 2026
  • Prioritised gap register — gaps categorised by regulatory severity, commercial risk, and remediation effort
  • IBS validation — assessment of whether your current Important Business Service selection and impact tolerance statements are defensible to a supervisor
  • Scenario testing evidence review — whether your existing test evidence meets the regulatory grade required
  • Board summary pack — two-page summary formatted for presentation to board or Risk Committee
  • Structured remediation roadmap — sequenced action plan with indicative timelines, ownership, and resource requirements
  • Annual Resilience Retainer proposal — presented at diagnostic close where retainer is the recommended next step

Engagement Structure 

Phase 1: Mobilise and baseline (Week 1)

  • Document review against structured assessment framework
  • Regulatory traceability matrix build
  • Stakeholder interviews: SMF24, Head of Op Res, COO (4–6 sessions)

Phase 2: Assessment and analysis (Weeks 2–4)

  • IBS validation and impact tolerance review
  • Scenario testing evidence assessment
  • Board reporting structure review
  • Gap register development

Phase 3: Findings and roadmap (Weeks 5–6)

  • Current state report finalised
  • Gap register with severity ratings
  • Board summary pack
  • Remediation roadmap

Findings presentation to SMF24 and ExCo 

Diagnostic Assessment Fee Structure

Three Tiers. All Fixed Fee. Outcome based delivery. No day rate risk. 

delivery

Standard

Single-regulated firm (FCA or PRA). Up to 4 IBS. Standard complexity.

£15-£18,000 + VAT

regulatory

Enhanced

Dual-regulated firm. Up to 6 IBS. Higher supplier complexity or DORA in scope.

£18,000-£22,000 + VAT

orange-icon-3

Complex

Complex group structure, 7 + IBS, International Operations, Multi-Regulatory Requirements in scope. 

£22,000-£25,000 + VAT 

WHY FOURTHLINE FOR THIS PRODUCT

delivery

Senior delivery

not senior oversight. The practitioner you meet in scoping is the practitioner who delivers. No hand-off to junior resource after the sale.

regulatory

Regulatory specificity

Every deliverable maps directly to the framework your regulator applies. Not a generic consulting output adapted for compliance.

orange-icon-3

Proportionate cost

Big Four-standard rigour. Without Big Four overhead. Fixed fees. No open-ended billing.

The firm entered its PRA supervisory meeting with a complete, evidenced operational resilience programme. The board evidence pack provided the regulator with the documentary record it requested on day one of the review. No remediation notice was issued.
Chris Sanford
Product Designer, Chetwood Financial
View Case study

What happens after the diagnostic Assessment

The Diagnostic is the start, not the end.

For most firms, the diagnostic findings identify a programme of work that extends well beyond a one-off project. Where the Annual Resilience Retainer is the right next step, FourthLine presents a retainer proposal following completion of the diagnostic assessment - scoped directly to the findings, with a fixed annual fee and a named senior associate allocated from day one. Most clients who complete a diagnostic move to the retainer within 6-8 weeks. 

1

Diagnostic Assessment

4–6 weeks

Current state analysis against FCA/PRA/DORA

2

Programme Remediation

Deliverable

BCM, TPRM, ICT Resilience or Cyber Resilience Programme based on prioritised gaps from the Diagnostic 

3

Annual Resilience Retainer

12 months

 Optional continuation customised to your operating model gaps and requirements. 

4

Ongoing senior-led resilience programme

Embedded resilience capability, testing matuirty delivery with continuous regulatory intelligence, board reporting and supervisory readiness 

Book a 30 Minute Scoping Call

No obligation. In 30 minutes Certified Resilience Practitioner will give you an honest assessment of whether your firm is in the segment where a diagnostic adds immediate value, what the likely findings will look like based on your sector and maturity stage, and what the right next steps are - whether that involves FourthLine or not. 

Book a 30-minute scoping call
Download the Diagnostic Assessment Overview