Four resilience disciplines. One specialist firm. Built for regulated financial services.

FourthLine delivers end-to-end operational resilience across business continuity, third party risk, technology recovery, and cyber resilience all aligned to FCA, PRA, and DORA requirements. Senior-led. Evidence-based. Proportionate cost.

We solve four connected resilience challenges that every regulated firm faces.

Operational Resilience & BCM

IBS mapping, impact tolerance setting, scenario testing, BCM frameworks, and recovery playbooks built to satisfy FCA and PRA supervisors, not just internal governance 

Regulatory driver:
PRA SS1/21 | FCA SYSC 15A

Primary Discipline

Third Party Risk Management

Supplier segmentation, due diligence frameworks, exit planning, and stressed exit testing giving you evidenced control over the supplier failures that could breach your impact tolerances.

Regulatory driver:
DORA Article 28 | PRA SS2/21

Solution Area 

ICT & Technology Resilience

ICT service continuity planning, disaster recovery frameworks, RTO/RPO validation, and technology recovery testing aligned to your IBS impact tolerances and your regulator\'s expectations

Regulatory driver:
PRA SS2/21 |
DORA

Solution Area

Cyber Resilience

Cyber resilience framework design, governance, incident response capability, and recovery planning aligned to NIST 2.0 and FCA expectations, integrated with your BCM and technology recovery architecture

Regulatory driver:
NIST 2.0 | FCA expectations  

Solution Area

How a FourthLine engagement works

1

Step 1 Diagnostic Assessment

A structured 4-6 week assessment of your firm's position against FCA, PRA, or DORA requirements. Produces a board-ready gap report and a sequenced remediation roadmap

Fixed fee: £15k–£25k 

2

Step 2 Programme Delivery

Modular programme delivery across one or more solution disciplines: Op Res & BCM, TPRM, ICT Resilience, or Cyber Resilience. Tailored to your firm's maturity priorities.

Fixed-fee. No open-ended billing 

3

Step 3 Annual Resilience Retainer

Senior-led, year-round resilience programme management. Annual scenario testing, regulatory intelligence, board reporting, and supervisory preparation embedded in your firm.

From £60k–£90k p.a. 

4

Step 4 Managed Service

For TPRM and supplier exit testing, FourthLine offers a managed service retainer, ongoing supplier oversight, annual due diligence cycles, and tested exit capability maintained on your behalf.

Fixed fee: £15k–£100k 

BIG FOUR STANDARD RESILIENCE EVIDENCE. COST PROPORTIONATE. SENIOR LED DELIVERY MODEL.

Senior Delivery

Every engagement is led and delivered by senior certified industry aligned resilience practitioners.  

Specialist Focus

We work only in financial services operational resilience.  Purpose built methodology for FCA & PRA regulated firms and categorisation. 

Cost Proportionate

Diagnostic Assessments from £15-25k, Annual Resilience Retainers from £60-90k pa. Fixed Fee delivery. No hidden scope creep. 

Proven

Our previous client delivery includes Arch Insurance, Foresters Financial, Chetwood Bank, Hampden & Co, Ruffer Investment, Interactive Investor, Novia Financial. 

The 2026 Operational Resilience Evidencing Gap: What Mid-Tier Firms Are Getting Wrong

Download our Q1 2026 regulatory intelligence briefing. What FCA and PRA supervisors are prioritising. 
The five most common evidencing gaps in mid-tier firms. What regulator-ready evidence actually looks like.