Regulatory Change Readiness Checklist

Overview

A comprehensive framework for managing regulatory change from horizon scanning through implementation and attestation. Designed for financial services firms navigating FCA, PRA, and EU regulatory requirements.

Regulatory Change Lifecycle

┌─────────────────────────────────────────────────────────────┐
│ REGULATORY CHANGE LIFECYCLE                                 │
└─────────────────────────────────────────────────────────────┘

1. HORIZON SCANNING → 2. IMPACT ASSESSMENT → 3. GAP ANALYSIS
        ↓                       ↓                      ↓
4. IMPLEMENTATION  ← 5. TESTING & QA     ← 6. GOVERNANCE APPROVAL
        ↓
7. CUTOVER & GO-LIVE → 8. POST-IMPLEMENTATION → 9. ATTESTATION

Phase 1: Horizon Scanning

Regulatory Sources to Monitor

FCA Policy Statements & Consultation Papers

• fca.org.uk/publications
• Sign up for regulatory alerts
• Monitor: PS, CP, TR, GC publications

PRA Policy Statements & Supervisory Statements

• bankofengland.co.uk/prudential-regulation/publications
• Focus on: SS, PS, CP for your firm type

UK Parliament & HM Treasury

• Financial Services Bills
• Secondary legislation (Statutory Instruments)

Industry Bodies

• UK Finance guidance
• AFME (Association for Financial Markets in Europe)
• ISDA protocols

EU Regulations (if applicable)

• ESMA, EBA, EIOPA publications
• Monitor for extraterritorial impact

Horizon Scanning Log Template

Checklist: Horizon Scanning

• Regulatory alerts configured for FCA, PRA, HMT
• Weekly review of new publications
• Industry newsletter subscriptions active (UK Finance, AFME)
• Quarterly review with legal counsel
• Regulatory change log maintained and up to date
• Senior management briefed on upcoming changes (monthly)

Phase 2: Impact Assessment

Impact Assessment Framework

Assess impact across 5 dimensions:

1. Business Impact

   • Revenue impact (new product restrictions, market access)
   • Cost impact (system changes, additional resources)
   • Operational impact (new processes, controls)

2. Process Impact

   • Which processes affected?
   • RACI changes required?
   • Volume/frequency changes?

3. Systems & Data Impact

   • System changes required?
   • Data capture/reporting requirements?
   • Integration impacts?

4. People Impact

   • Headcount changes?
   • New roles or skills needed?
   • Training requirements?

5. Risk & Control Impact

   • New risks introduced?
   • Control gaps created?
   • Compliance obligations?

Impact Assessment Template

REGULATORY CHANGE: Consumer Duty (FCA PS22/9)
ASSESSMENT DATE: 15 January 2025
ASSESSED BY: Chief Compliance Officer

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

OVERALL IMPACT: HIGH
Effective Date: 31 July 2024 (for new/existing open products)
Regulatory Risk if Non-Compliant: Enforcement action, customer redress

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

1. BUSINESS IMPACT (HIGH)
   • Revenue: Potential £2M impact from product changes/withdrawals
   • Cost: £500k implementation (systems, processes, training)
   • Operations: 4 new processes, 40% increase in product review workload

2. PROCESS IMPACT (HIGH)
   Affected Processes:
   • Product design & approval (NEW: value assessment framework)
   • Customer communications (NEW: plain English requirements)
   • Complaints handling (NEW: root cause analysis)
   • Product monitoring (NEW: customer outcome metrics)

3. SYSTEMS & DATA IMPACT (MEDIUM)
   • CRM: Capture customer outcome metrics (12 new data fields)
   • Product system: Implement value assessment scoring
   • Reporting: New MI dashboard for Consumer Duty outcomes
   • Estimated effort: 8 weeks development + 4 weeks testing

4. PEOPLE IMPACT (MEDIUM)
   • New role: Consumer Duty Lead (1 FTE)
   • Upskilling: All customer-facing staff (120 people)
   • Training: 8 hours mandatory e-learning + 4 hours workshops
   • Timeline: Complete by Q2 2024

5. RISK & CONTROL IMPACT (HIGH)
   New Risks:
   • Non-compliance with Consumer Duty → Enforcement action
   • Products don't deliver fair value → Customer redress
   • Poor customer outcomes → Reputational damage

   Control Gaps:
   • No systematic value assessment process
   • Limited customer outcome monitoring
   • Insufficient governance for Consumer Duty oversight

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

RECOMMENDATION:
Establish Consumer Duty implementation programme with 3 workstreams:
1. Product Review & Fair Value (Lead: Product Director)
2. Customer Communications & Support (Lead: Customer Experience Director)
3. Governance & MI (Lead: CCO)

Budget: £500k
Timeline: 12 months (complete by July 2024)

Checklist: Impact Assessment

• Impact assessed across all 5 dimensions (Business, Process, Systems, People, Risk)
• Affected business units identified and consulted
• Financial impact quantified (cost + revenue)
• Timeline and milestones defined
• Resource requirements estimated
• Dependencies identified (legal, IT, external vendors)
• Risks documented and escalated if material
• Executive summary prepared for senior management

Phase 3: Gap Analysis

Gap Analysis Template

Gap Prioritisation Matrix

                  IMPACT ON CUSTOMER

    HIGH    │  P1 - CRITICAL      P2 - HIGH PRIORITY
            │  (Implement first)  (Plan carefully)
            │
COMPLEXITY │──────────────────────────────────────
            │
    LOW     │  P3 - QUICK WINS    P4 - LOW PRIORITY
            │  (Easy fixes)       (Defer if needed)

                  LOW ────────────► HIGH
                     IMPLEMENTATION COMPLEXITY

P1 - Critical (High impact, Low complexity):

• Quick fixes with high customer benefit
• Example: Fix misleading language in customer emails

P2 - High Priority (High impact, High complexity):

• Strategic initiatives requiring significant investment
• Example: Build customer outcomes monitoring dashboard

P3 - Quick Wins (Low impact, Low complexity):

• Easy improvements, do opportunistically
• Example: Update website FAQs

P4 - Low Priority (Low impact, High complexity):

• Defer or descope if budget constrained
• Example: Advanced AI for sentiment analysis

Checklist: Gap Analysis

• All regulatory requirements listed (extract from policy statement)
• Current state documented (process maps, system screenshots, policies)
• Target state defined (what "good" looks like)
• Gaps identified and quantified
• Remediation actions defined (what, who, when, cost)
• Dependencies and risks documented
• Gaps prioritised using impact/complexity matrix
• Gap analysis reviewed with affected business units
• Board/ExCo approval obtained for implementation plan

Phase 4: Implementation Planning

Implementation Roadmap Template

PROGRAMME: Consumer Duty Implementation
DURATION: 12 months (Jan 2024 - Jul 2024)
BUDGET: £500k
GOVERNANCE: Steering Committee (monthly), Project Board (weekly)

┌─────────────────────────────────────────────────────────────┐
│ WORKSTREAM 1: PRODUCT REVIEW & FAIR VALUE                  │
├─────────────────────────────────────────────────────────────┤
│ Q1 2024: Develop framework, pilot on 5 products             │
│ Q2 2024: Roll out to all 24 products, document outcomes     │
│ Lead: Product Director │ Budget: £150k │ Resources: 2 FTE   │
└─────────────────────────────────────────────────────────────┘

┌─────────────────────────────────────────────────────────────┐
│ WORKSTREAM 2: CUSTOMER COMMUNICATIONS & SUPPORT             │
├─────────────────────────────────────────────────────────────┤
│ Q1 2024: Plain English review, customer testing             │
│ Q2 2024: Rewrite T&Cs, launch guides, train frontline staff │
│ Lead: CX Director │ Budget: £100k │ Resources: 3 FTE        │
└─────────────────────────────────────────────────────────────┘

┌─────────────────────────────────────────────────────────────┐
│ WORKSTREAM 3: GOVERNANCE & MI                               │
├─────────────────────────────────────────────────────────────┤
│ Q1 2024: Define outcomes, build dashboard, establish committee│
│ Q2 2024: Go-live with monitoring, quarterly Board reporting │
│ Lead: CCO │ Budget: £250k │ Resources: 1 FTE + IT dev team  │
└─────────────────────────────────────────────────────────────┘

KEY MILESTONES:
31 Jan 2024: Programme kick-off
29 Feb 2024: Fair value framework approved
31 Mar 2024: Consumer Duty Committee established
30 Apr 2024: Product reviews complete
31 May 2024: MI dashboard go-live
30 Jun 2024: Customer comms updated
31 Jul 2024: PROGRAMME COMPLETE (Regulatory deadline)

RISKS:
• Resource availability (mitigate: backfill BAU roles)
• Vendor delays on MI dashboard (mitigate: parallel manual process)
• Customer testing reveals issues (mitigate: buffer time in Q2)

RACI for Regulatory Change Programme

Checklist: Implementation Planning

• Programme structure defined (workstreams, governance)
• RACI matrix created and agreed
• Budget approved and allocated
• Resources secured (FTE, contractors, vendors)
• Milestones and deliverables defined
• Dependencies mapped
• Risks identified and mitigation plans in place
• Communication plan created (stakeholders, frequency, channels)
• Change management approach defined
• Programme kick-off meeting scheduled

Phase 5: Testing & Quality Assurance

Testing Approach

1. Unit Testing (Development team)

• Test individual components (e.g., MI dashboard calculations)
• Verify system changes work as designed

2. Integration Testing (IT + Business)

• Test end-to-end flows (e.g., product data → MI dashboard → Board report)
• Verify interfaces between systems work correctly

3. User Acceptance Testing (UAT) (Business users)

• Test real-world scenarios with actual users
• Confirm solution meets business requirements

4. Regulatory Compliance Testing (Compliance team)

• Verify solution meets ALL regulatory requirements
• Evidence pack for regulatory inspection

UAT Test Script Example

TEST CASE: TC-CD-001
TEST SCENARIO: Fair Value Assessment - Savings Product
TESTER: Product Manager
DATE: 15 May 2024

PRE-CONDITIONS:
• Product data loaded in product system
• Fair value framework approved
• User logged in with Product Manager role

TEST STEPS:
1. Navigate to Product Review module
2. Select "Instant Access Savings Account"
3. Click "Fair Value Assessment"
4. Review pre-populated data:
   - Interest rate: 3.5% AER
   - Fees: £0 monthly fee
   - Features: Unlimited withdrawals, online access
5. Complete value assessment questions:
   - Does product meet customer needs? [Yes]
   - Is pricing fair relative to costs? [Yes]
   - Are limitations clearly communicated? [Yes]
   - Customer outcome metrics acceptable? [Yes]
6. Upload supporting evidence (competitor benchmarking)
7. Click "Submit for Approval"
8. Verify approval workflow triggered (email to Product Director)

EXPECTED RESULT:
• Assessment saved successfully
• Status updated to "Pending Approval"
• Email sent to Product Director with approval link
• Assessment visible in Board dashboard

ACTUAL RESULT:
[PASS] All steps completed successfully. Email received. Dashboard updated.

DEFECTS IDENTIFIED:
None

SIGN-OFF:
Tester: _________________ Date: __/__/____
Reviewer: _________________ Date: __/__/____

Checklist: Testing & QA

• Test plan created (scope, approach, roles, timeline)
• Test environment provisioned (mirror production)
• Test data created (realistic scenarios)
• Unit testing complete (all defects resolved)
• Integration testing complete (interfaces working)
• UAT test scripts created (business scenarios)
• UAT testing complete (users signed off)
• Regulatory compliance testing complete (evidence pack)
• Defects logged, prioritised, and resolved
• Go-live checklist prepared (cutover plan)

Phase 6: Governance & Approval

Governance Framework

┌─────────────────────────────────────────────────────────────┐
│ BOARD                                                       │
│ Accountable for regulatory compliance                      │
│ Reviews: Quarterly │ Approves: High-impact changes        │
└────────────────────────┬────────────────────────────────────┘
                         │
         ┌───────────────┴───────────────┐
         │                               │
┌────────▼────────┐             ┌───────▼────────┐
│ EXEC COMMITTEE  │             │ AUDIT COMMITTEE│
│ Oversight       │             │ Assurance      │
│ Reviews: Monthly│             │ Reviews: Quarterly│
└────────┬────────┘             └────────────────┘
         │
┌────────▼──────────────────────────────────────────────────┐
│ REGULATORY CHANGE STEERING COMMITTEE                       │
│ Members: CCO (Chair), CFO, CRO, COO, Product Director     │
│ Reviews: Fortnightly │ Approves: Medium-impact changes    │
└────────┬───────────────────────────────────────────────────┘
         │
┌────────▼──────────────────────────────────────────────────┐
│ PROJECT BOARD                                              │
│ Members: Programme Manager, Workstream Leads, PMO         │
│ Reviews: Weekly │ Manages: Day-to-day execution           │
└────────────────────────────────────────────────────────────┘

Approval Gates

Gate 1: Impact Assessment

• Approver: Regulatory Change Steering Committee
• Criteria: Impact quantified, resource plan defined, risks identified
• Output: Go/No-Go decision, budget approval

Gate 2: Solution Design

• Approver: Project Board + IT Architecture Review
• Criteria: Design meets requirements, technically feasible, risks mitigated
• Output: Approval to build

Gate 3: UAT Sign-off

• Approver: Business Owners (Product Dir, CX Dir, CCO)
• Criteria: All test cases passed, defects resolved, compliance verified
• Output: Approval to deploy

Gate 4: Go-Live

• Approver: Exec Committee
• Criteria: Cutover plan approved, rollback plan tested, training complete
• Output: Go-Live approval

Gate 5: Post-Implementation Review

• Approver: Board (or delegate to Audit Committee)
• Criteria: Benefits realised, compliance evidenced, lessons learned captured
• Output: Project closure

Checklist: Governance & Approval

• Governance framework defined (committees, approval authority)
• Approval gates defined with clear criteria
• Steering committee established and meeting regularly
• Project board established and meeting weekly
• Escalation process defined (issues, risks, decisions)
• Reporting cadence defined (weekly, monthly, quarterly)
• Approval documentation prepared for each gate
• Approvers briefed and available for decision points

Phase 7: Cutover & Go-Live

Go-Live Checklist

T-7 Days:

• Final UAT sign-off received
• Production environment ready
• Data migration tested and validated
• Training completed (users trained and certified)
• Communications sent (internal announcement, customer notice if applicable)
• Go-Live approval obtained from Exec Committee

T-3 Days:

• Dress rehearsal completed (full cutover simulation)
• Support team briefed and on standby
• Rollback plan tested and ready
• Monitoring dashboards configured

T-1 Day:

• Final data migration (cut-over freeze)
• User access provisioned
• Helpdesk scripts updated
• Go-Live command centre set up

Go-Live Day:

• Systems switched on (phased or big bang)
• Smoke testing completed (basic sanity checks)
• Users logged in successfully
• No critical defects identified in first 2 hours
• Go-Live declared successful or rollback initiated

T+1 Day:

• Post-implementation review (lessons learned)
• Hypercare support continues (48-72 hours)
• Defect log reviewed, priority issues resolved
• Stakeholders notified of go-live success

Checklist: Cutover & Go-Live

• Cutover plan created (activities, timing, roles)
• Rollback plan created and tested
• Go-live criteria defined (what defines "successful go-live")
• Support model defined (hypercare, BAU handover)
• Communication plan executed (users, customers, regulators)
• War room/command centre established
• Monitoring in place (system health, user activity, defects)
• Go-live declared successful and documented

Phase 8: Post-Implementation Review

Post-Implementation Review Template

PROGRAMME: Consumer Duty Implementation
PIR DATE: 15 August 2024 (2 weeks post go-live)
ATTENDEES: Steering Committee, Project Board

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

1. DELIVERY SUMMARY

   Go-Live Date: 31 July 2024 (ON TIME)
   Budget: £485k of £500k (3% under budget)
   Scope: 100% of must-haves delivered, 2 nice-to-haves deferred

   Status: SUCCESS

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

2. BENEFITS REALISATION

   Target: Fair value assessment for all 24 products
   Actual: 24 products assessed, documented, and Board-approved

   Target: Customer outcome monitoring dashboard go-live
   Actual: Dashboard live, feeding quarterly Board pack

   Target: Plain English T&Cs for all customer-facing products
   Actual: T&Cs rewritten and customer-tested (readability score: 8/10)

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

3. LESSONS LEARNED

   What Went Well:
   • Early engagement with business stakeholders ensured buy-in
   • Phased approach (pilot → rollout) reduced risk
   • Clear governance and weekly reporting kept programme on track

   What Could Be Improved:
   • UAT discovered late issues; earlier user involvement needed
   • Vendor delays on MI dashboard; need contingency plans
   • Training was rushed in final weeks; start earlier next time

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

4. OUTSTANDING ACTIONS

   • 2 nice-to-have features deferred to Phase 2 (Sep 2024)
   • Hypercare support continues for 2 more weeks
   • Quarterly effectiveness review scheduled (Oct 2024)

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

5. RECOMMENDATION

   Programme CLOSED successfully. Hand over to BAU.
   Quarterly monitoring of Consumer Duty outcomes to continue.

Checklist: Post-Implementation Review

• PIR meeting scheduled (2-4 weeks post go-live)
• Delivery metrics collected (time, budget, scope)
• Benefits realisation assessed (did we achieve objectives?)
• Lessons learned captured (what went well, what didn't)
• Outstanding actions identified and assigned owners
• Knowledge transfer completed (documentation, handover to BAU)
• Project formally closed (budget released, team disbanded)
• PIR report approved by Steering Committee

Phase 9: Attestation & Ongoing Compliance

Regulatory Attestation Template

TO: Financial Conduct Authority
FROM: [Your Firm Name]
FRN: [FRN Number]
DATE: 31 October 2024

SUBJECT: Consumer Duty Annual Attestation

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

I, [CEO Name], Chief Executive Officer of [Your Firm], hereby attest that:

1. FAIR VALUE ASSESSMENTS
   We have completed fair value assessments for all 24 products
   All products have been assessed as providing fair value
   Documentation is available for regulatory review

2. CUSTOMER OUTCOMES MONITORING
   We monitor 4 customer outcomes across all products
   Outcomes are reported quarterly to the Board
   Action is taken where outcomes fall below expectations

3. GOVERNANCE
   Consumer Duty Committee established and meeting quarterly
   Board receives Consumer Duty dashboard quarterly
   Management Information (MI) reviewed and acted upon

4. CUSTOMER COMMUNICATIONS
   All customer communications reviewed for clarity
   T&Cs rewritten in plain English (readability score 8/10)
   Customer support trained on Consumer Duty requirements

SUPPORTING EVIDENCE:
• Product fair value assessment reports (Appendix A)
• Customer outcomes dashboard (Appendix B)
• Board minutes evidencing oversight (Appendix C)
• Training records (Appendix D)

Signed: _______________________
CEO: [Name]
Date: 31 October 2024

Reviewed by: Chief Compliance Officer
Date: 30 October 2024

Ongoing Compliance Monitoring

Quarterly Reviews:

• Customer outcomes dashboard reviewed by Board
• Product fair value assessments refreshed annually (or when material change)
• Consumer Duty Committee reviews trends, issues, actions

Annual Attestation:

• CEO attests compliance with Consumer Duty
• Evidence pack prepared for potential regulatory review
• Internal audit reviews Consumer Duty framework

Trigger Events (ad-hoc review required):

• New product launch → Fair value assessment required
• Material change to existing product → Re-assess fair value
• Customer outcome deterioration → Root cause analysis + remediation
• Regulatory feedback → Implement changes, re-attest

Checklist: Attestation & Ongoing Compliance

• Attestation process defined (who, what, when)
• Evidence pack maintained (ready for regulatory review)
• Quarterly monitoring in place (outcomes, governance)
• Annual attestation completed and submitted (if required)
• Trigger events identified and process defined
• Internal audit reviews regulatory compliance annually
• Board oversight continues (quarterly Consumer Duty item)

Regulatory Change Programme Toolkit

Key Documents

1. Regulatory Change Log (Track all changes)
2. Impact Assessment Template (Assess each change)
3. Gap Analysis Template (Identify remediation needed)
4. Implementation Roadmap (Plan delivery)
5. RACI Matrix (Clarify accountability)
6. Testing Scripts (Evidence compliance)
7. Go-Live Checklist (Ensure readiness)
8. PIR Template (Capture lessons learned)
9. Attestation Template (Regulatory reporting)

Estimated Timelines (by complexity)

Need Expert Support?

Navigating regulatory change requires specialist knowledge, programme management discipline, and stakeholder engagement. If you're facing a complex regulatory change or need support preparing for FCA/PRA reviews, contact our team for a consultation.

Template Version: 1.0 Last Updated: January 2025 Regulatory Alignment: FCA, PRA, UK Financial Services License: Free for commercial use with attribution