In November 2025, the Financial Conduct Authority (FCA), published findings from a 2025 FCA multi-firm review focusing on business-wide risk assessment and customer risk assessment processes.
The FCA fed back its findings on firms identifying, understanding and assessing risk, mitigating risk and managing risk. The findings highlight good and poor practice to help firms reflect on how they are meeting the existing risk assessment requirements.
While firms involved in this review are part of FCA regulated population such as building societies, e-money payments firms and wealth management firms, there are general learnings which can be taken from the findings.
This information is provided as resources and information only and nothing in these pages purports to provide professional advice or definitive legal interpretation(s) or opinion(s) on the applicable legislation or legal or other matters referred to in the pages. If the reader is in doubt on any matter in this complex area further legal or other advice must be obtained. While every reasonable care has been taken by the Institute in the preparation of these pages, we do not guarantee the accuracy or veracity of any resource, guidance, information or opinion, or the appropriateness, suitability or applicability of any practice or procedure contained therein. The Institute is not responsible for any errors or omissions or for the results obtained from the use of the resources or information contained in these pages.