IOR Scottish Chapter Annual Conference Glasgow Caledonian University – 1 st November 2013

1. IOR Scottish Chapter Annual Conference Glasgow Caledonian University – 1st November 2013 Relevance of Operational Risk to the FCA Jill Savager Manager, Operational Risk, Financial Conduct Authority

2. What we will cover • FCA overview • Relevance of operational risk to the FCA • How our focus on operational risk is different from the FSA

3. FCA Objectives Strategic objective: • To ensure that the relevant markets function well Operational objectives: • To secure an appropriate degree of protection for consumers • To protect and enhance the integrity of the UK financial system • To promote effective competition in the interests of consumers In comparison, the objectives of the PRA are: • To promote the safety and soundness of banks, building societies, credit unions, insurers and major investment firms. • For insurers, to contribute to the securing of an appropriate degree of protection for policyholders.

4. FCA Scope Supervise conduct of c.25,000 financial services firms Regulate prudential standards for c.23,000 of these firms Co-operation and co-ordination with PRA through Memorandum of Understanding (MoU)

5. FCA Supervision Approach Approach based on key principles • Forward looking and more pre-emptive • Focused on judgement not process • Consumer focused • Focused on big issues and causes of problems • Robust when things go wrong • More focused on business models and culture • Orientated towards firms doing the right thing • Greater emphasis on individual accountability • Externally focused, engaged, transparent and listening • Joined-up approach To ensure firms have the interests of their customers and the integrity of the market at the heart of how they run their business. Aim of Supervision Executed through coherent operating model Principles • Making life easier for consumers across their life cycles • Embedding major interventions • Preparing for the worst • Looking further up the value chain • Ensuring redress when thing so wrong Enabling delivery of real outcomes Delivering real outcomes

6. Definition of Operational Risk Basel definition: “The risk of loss resulting from inadequate or failed internal processes, people and systems or from external events” The interpretation of ‘loss’ can be extended beyond financial loss to include other aspects such as: • Loss to customers • Loss of integrity of the UK financial system

7. The example of mis-selling Prudential-related Impacts Financial Loss Damage to Physical Assets Revenue Foregone Redress Operational Risk IT systems failure Fraud Mis-selling Etc. Regulatory Fine Reputational Damage Conduct-related Impacts Consumer Detriment Firm Failure Consumers Market Integrity Competition

8. What are our expectations? Robust and effective operational risk management framework Second line of defence providing robust challenge FCA has not created new risks • Change in impact and likelihood? • New ways of managing risks? • Assessing wider range of operational risk impacts? Not just ‘a compliance exercise’

9. ‘Typical ‘ Operational Risk Framework Elements OR Governance & Culture (Policies, committees, allocation of responsibilities, challenge, performance appraisal, reward, etc) OR Taxonomy (definition, categorisation and terminology) OR Appetite / Thresholds OR Monitoring, Escalation & Reporting Risk Identification & Assessment OR Measurement & Quantification Risk & Control Self-Assessments (RCSAs) Residual Risks Inherent Risks Controls Internal & External Incident Capture Scenario Analysis OR Systems & Documentation

10. Possible enhancements to your OR framework • Add customers and UK financial system integrity impacts to risk assessment methodology for RCSAs • Number of customers affected, measure of customer detriment etc. • Size of market affected, volume and value of transactions, significance to operation of UK financial system • Assess effectiveness of controls in managing risks for the customer • Include conduct impacts when capturing details of crystallised operational risk loss events • Enhance MI to give management a conduct perspective on risks the firm is exposed to

11. Questions