Prudential Regulation Authority Rulebook

3.1

A firm must have in place sound, effective and comprehensive strategies, processes and systems that enable it adequately to:

1. (1) identify its important business services;
2. (2) set an impact tolerance for each important business service; and
3. (3) identify and address any risks to its ability to comply with the obligation under 2.5.

3.2

The strategies, processes and systems required by 3.1 must be proportionate to the nature, scale and complexity of the firm’s activities.