HMT designates AWS, Google Cloud, Microsoft and Oracle as ‘Critical Third Parties’, bringing them under joint regulatory oversight to strengthen financial sector resilience against cyber & technology risks

Effective 13 July 2026, the providers will be subject to joint oversight by the Bank of England, Prudential Regulation Authority (PRA), and Financial Conduct Authority (FCA), requiring them to meet minimum resilience standards, identify and manage systemic risks, and cooperate with regulators to reduce the impact of technology failures or cyber incidents on financial services….