UK regulators have finalised their operational resilience policies, giving firms a clear picture of implementation timeframes for achieving compliance.

Useful changes and clarifications have been made in the final policy, including changes to key concepts and better alignment with existing domestic requirements and with existing or forthcoming international standards and guidelines. However, some areas of difficulty remain. In this briefing we highlight some of the challenges ahead for firms.