FCA review on Implementing Technology Change

On 5 February 2021, the FCA published its review on Implementing Technology Change.  This review sets the FCA’s findings from its cross-Financial Services change management review which looked at how financial firms manage technology change, the impact of change failures and the practices utilised within the industry to help reduce the impact of incidents resulting from change management.

A number of significant IT failures in the last 10 years have led to greater scrutiny of the effectiveness of technology change management in the financial services (FS) sector. The evolution of business models, economic and regulatory change and the increasing pace of technological advancements have emphasised the need for firms to change with confidence. Technology is integral to the delivery of FS and while technology change presents firms with the opportunity to innovate, lower costs and improve the quality of service, it also introduces operational risks.

The FCA’s analysis of the incident data firms report revealed that change related incidents are consistently one of the top causes of failure and operational disruption. Nearly 1,000 material incidents were reported to the FCA in 2019, 17% of which were attributed to change activity.

By reviewing how financial firms implement technology change, and the effect that outages have on consumers and the financial system, the FCA aimed to understand how firms currently approach managing technology change and the causes of the problems they encounter.

The report sets out the analysis and key findings across the following areas:

  1. contributing practices to change success and change failure
  2. the impact of incidents caused by technology change
  3. how firms govern and manage technology change
  4. how firms build and deploy technology change
  5. how infrastructure impacts technology change

This review is relevant for all FS organisations and may also be of interest to third parties providing technology services to the industry.

The aim of operational resilience remains to prevent, respond to, recover and learn from operational disruptions. This review will contribute to the discussion on how firms can implement technology change in ways that reduce the potential for operational disruption. As firms are increasingly using remote and flexible working, it is critically important for firms to understand the services they provide, how change activity can impact those services and invest in their resilience to protect themselves, consumers and the market.

https://www.fca.org.uk/publications/multi-firm-reviews/implementing-technology-change