About a-team Marketing Services
The knowledge platform for the financial technology industry
The knowledge platform for the financial technology industry

A-Team Insight Blogs

98% of Firms Not Ready for SM&CR, Finds ACA Compliance

Subscribe to our newsletter

Less than 2% of affected firms have completed sufficient preparation for the FCA’s upcoming Senior Managers and Certification Regime (SM&CR) while only 2% of employees have sufficient awareness of the new rules and their implications across the organisation, according to a new survey from ACA Compliance.

The new regulation is due to come into force in December this year, with a submissions deadline of November 24 for conversion from the Approved Persons Regime and a deadline of December 9 for solo-regulated firms (and December 10 for dual-regulated firms) to upload their data. With its shift towards individual responsibility, the regulation is expected to have a substantial impact on data management due to the increased personal data requirements, while it may also correlate with the growing focus on financial crime – the FCA in 2016 specifically highlighted financial crime as an area where senior management functions and prescribed responsibilities were not always assigned to sufficiently senior individuals.

But is the industry taking it seriously enough? From a pool of over 70 respondents including asset managers, hedge funds, private equity firms, broker-dealers and wealth managers, more than a quarter admitted that there is minimal general awareness of SM&CR outside of their compliance teams – and almost 60% are less than a third of the way through their SM&CR projects, despite implementation looming just four months away.

“Without a doubt, solo-regulated firms need to accelerate the pace at which they are preparing for the SM&CR in the UK. It’s a long road ahead for 98% of firms and it’s clear the amount of work required ahead of the deadline is being underestimated. For some, the coming of this new regime will necessitate substantial changes to both governance and culture,” says Adam Palmer, partner at ACA Compliance.

“There are new policies, processes, and documentation that solo-regulated firms must implement. The engagement that must take place with certain individual employees will take time if firms are prepared to make the necessary changes to their overall business culture required by the regulator. In addition, employees across the firm need to be trained on SM&CR individually, as it will in many cases touch on their day-to-day roles. It’s important for firms to start working on SM&CR in earnest today.”

Subscribe to our newsletter

Related content

WEBINAR

Recorded Webinar: Managing Non-Financial Misconduct Under SMCR

Non-financial misconduct – encompassing behaviours such as bullying, sexual harassment, and discrimination is a key focus of the Senior Managers and Certification Regime (SMCR). The Financial Conduct Authority (FCA) has underscored that such misconduct is not only unethical but also poses significant risks to a firm’s culture and operational integrity. Recognizing the profound impact on...

BLOG

Symphony and the Future of Market Communications: T+1, DORA, and Deepfake Defence

In May 2024, the U.S. capital markets made the long-awaited transition to T+1 settlement, with RegTech company Symphony playing a quiet but pivotal role. The integration of its platform with DTCC’s Central Trade Manager (CTM) gave firms the ability to resolve trade contract breaks in real time, reducing the risk of settlement failure. “The DTCC,...

EVENT

AI in Data Management Summit New York City

Following the success of the 15th Data Management Summit NYC, A-Team Group are excited to announce our new event: AI in Data Management Summit NYC!

GUIDE

The DORA Implementation Playbook: A Practitioner’s Guide to Demonstrating Resilience Beyond the Deadline

The Digital Operational Resilience Act (DORA) has fundamentally reshaped the European Union’s financial regulatory landscape, with its full application beginning on January 17, 2025. This regulation goes beyond traditional risk management, explicitly acknowledging that digital incidents can threaten the stability of the entire financial system. As the deadline has passed, the focus is now shifting...