Cybersecurity Under the FCA: The Supervisory Expectations Firms Still Struggle to Meet in 2025

Financial services operate in one of the most heavily regulated environments in the world, and yet the failures identified in FCA cybersecurity reviews often have little to do with whether a firm understands the rules. Most institutions can recite the familiar acronyms — SYSC, SMCR, PRIN, and the operational resilience framework — with ease. They […]