Meet FCA Obligations. Win Institutional Clients.
FCA-authorised firms face mandatory operational resilience requirements under PS21/3 — and DORA is extending those obligations to firms with EU exposure. Meanwhile, institutional and HNW clients now run security due diligence before instructing. UrbanIQ delivers the compliance posture that satisfies regulators and wins the mandates.
FCA Is Watching Operational Resilience. Most Firms Aren't Ready.
PS21/3 isn't optional — and the FCA has already issued enforcement notices to firms without documented resilience frameworks. Add institutional due diligence requirements and DORA timelines, and the compliance burden on small to mid-size financial services firms has never been higher.
FCA PS21/3 Requires Documented Resilience Evidence
The FCA's operational resilience policy requires all authorised firms to identify important business services, set impact tolerances, and continuously test their ability to stay within them. Firms without documented evidence face supervisory action and potential enforcement.
Institutional Clients Run Security Due Diligence
Family offices, pension funds, and corporate treasury clients now require completed security questionnaires (typically based on ISO 27001 or Cyber Essentials Plus) before instructing. Failing their vendor assessment process means losing the mandate before the pitch.
DORA Deadlines Are Arriving
The Digital Operational Resilience Act (DORA) applies to EU-connected financial entities and their ICT suppliers. Firms with any EU client base or third-party exposure face mandatory ICT risk management, incident reporting, and resilience testing requirements — with no opt-out.
The FCA doesn't grade on effort. It grades on documented, evidenced control.
Real Financial Services Results. Hyper-Specific. Verified.
All case studies are anonymised under NDA. The operational details — headcount, transaction volumes, locations — are real.
Passed Institutional Client Security Assessment. £4.2M Mandate Secured.
A longstanding HNW client referred the firm to a family office seeking a new discretionary manager. The family office required completion of a 140-point security questionnaire before proceeding. The firm failed the initial assessment, citing gaps in access control documentation, incident response planning, and third-party risk management. UrbanIQ addressed all identified gaps within eight weeks, the assessment was resubmitted and approved, and the mandate was formally awarded.
"We'd never had a client ask those questions before. UrbanIQ turned what felt like an impossible process into a straightforward one — and we won the mandate we'd have otherwise lost."
— Managing Director, IFA Practice, Manchester
FCA Operational Resilience Framework Documented. Zero Findings at Supervisory Visit.
Following an FCA Dear CEO letter to the sector on operational resilience, the firm's Compliance Director identified that they lacked the documentation required to evidence compliance with PS21/3. UrbanIQ mapped all important business services, set and documented impact tolerances, and built the supporting resilience testing framework within twelve weeks. When the FCA conducted a supervisory visit six months later, zero findings were raised against the resilience framework.
"The FCA visit could have been catastrophic without the framework UrbanIQ built. Instead it became evidence of exactly the kind of firm we'd always intended to be."
— Compliance Director, Wealth Management Firm, London
Built for the People Who Own This Problem.
If you're FCA-authorised and responsible for compliance, client retention, or operational risk — this was built for you.
Chief Financial Officer
Regulatory reporting and institutional client risk
Compliance Director
FCA obligations, PS21/3, and DORA readiness
Operations Director
Business continuity and ICT resilience frameworks
Risk Manager
Third-party and cyber risk documentation
IT Manager
Technical controls and incident response readiness
Find Out Where Your FCA Resilience Framework Falls Short.
Book your free Financial Services Compliance Snapshot — a 15-minute call with a senior advisor who will identify your PS21/3 gaps, institutional client readiness, and your fastest path to a documented resilience framework.
Trusted by IFAs, wealth managers, and financial services firms regulated by the FCA.