Prudential Regulation Authority Rulebook

3.1

A firm must have in place sound, effective and comprehensive strategies, processes and systems that enable it adequately to:

1. (1) identify its important business services and, where Group Supervision 22.2 applies, its important group business services;
2. (2) set an impact tolerance for each important business service and, where Group Supervision 22.2 applies, each important group business service; and
3. (3) identify and address any risks to its ability to comply with the obligation in 2.5.

3.2

The strategies, processes and systems required by 3.1 must be proportionate to the nature, scale and complexity of the firm’s activities.